Windows Server - issue with RDP connection

HTB Content Academy
1

Hello
I can’t connect to this machine with VPN . I’ve tried to use UDP - TCP (and of course reseting) but each time i got this error message:
[ERROR][com.freerdp.core] - transport_connect_tls:freerdp_set_last_error_ex ERRCONNECT_TLS_CONNECT_FAILED [0x00020008]
wich is very frustrating !
Also all other machines in the module work just fine using VPN .
Maybe a temporary problem ?

2

It’s in the windows privilege escalation module …

3

Hello there!

  1. Are you already connected to the academy VPN when trying to start the RDP session?
  2. Which is the command you are typing on your console, to connect to RDP?
4

Thanks for your response:
1 yes
2 I use freerdp:
xfreerdp /f /u:htb-student /p:HTB_@cademy_stdnt! /v:10.129.240.122
:slight_smile:

5

After many attempts using freerdp i’ve tried another rdp client (rdesktop) and everything works fine .
The problem comes from xfreerdp i guess it has to do with the ssl certificate .
:slight_smile:

1 Like
6

Methods to fix-
Method 1

Use an RDP client, such as Remote Desktop Connection, to establish a remote connection to the Remote Desktop server.

Method 2

Use the qwinsta tool to view the listener status on the Remote Desktop server:

On the Remote Desktop server, click Start, click Run, type cmd, and then click OK.
At the command prompt, type qwinsta, and then press Enter.
The RDP-TCP session state should be Listen.
Method 3

Use the netstat tool to view the listener status on the Remote Desktop server:

On the Remote Desktop server, click Start, click Run, type cmd, and then click OK.
At the command prompt, type netstat -a then press Enter.
The entry for TCP port 3389 should be Listening.
Method 4

Use the telnet tool to connect to the RDP port on the Remote Desktop server:

From another computer, click Start, click Run, type cmd, and then click OK.
At the command prompt, type telnet 3389 , where is the name of the Remote Desktop server, and then press Enter.
If telnet is successful, you receive the telnet screen and a cursor.

If telnet is not successful, you receive the following error message:

Connecting To servername… Could not open connection to the host, on port 3389: Connect failed

The qwinsta, netstat, and telnet tools are also included in Windows XP and Windows Server 2003. You can also download and use other troubleshooting tools, such as Portqry.

This may help you,
Rachel Gomez

7

Its on an older windows version which uses a SHA1 for certs. Add /tls-seclevel:0 to your xfreerdp command and it will work. For anyone else this is on the Dealing with End of Life Systems under Windows Server.

2 Likes
8

use rdesktop

rdesktop -u htb-student -p HTB_@cademy_stdnt! 10.129.85.56:3389