JoelGMSec/AutoRDPwn

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1118 stars · 497 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AutoRDPwn is a PowerShell post-exploitation framework that automates the RDP Shadow attack on Windows, letting an attacker view or control a victim's desktop using native OS tools. It includes additional modules for remote shells, hash dumping, and keylogging via a multilingual menu.

Use cases

• automate RDP shadow session attacks on Windows
• view or control a remote Windows desktop during pentests
• get a reverse shell on a Windows machine
• dump system hashes with Mimikatz
• run post-exploitation modules from a reverse shell
• pivot between compromised Windows machines

When to choose

• you are doing authorized red-team or pentest work against Windows targets
• you want to leverage native Windows RDP shadowing without third-party tools
• you need a menu-driven PowerShell post-exploitation framework with extra modules

When to avoid

• you need a maintained tool - the latest release dates to 2022
• you are not working on Windows or without PowerShell 4.0+
• you lack authorization to test the target systems
• you need stealth against modern EDR, as the technique is well known and monitored

Facets

framework · maturity maintenance

security penetration-testing cli workflow-automation security penetration-testing windows windows cli red-team post-exploitation rdp-shadow-attack powershell-framework remote-desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="JoelGMSec/AutoRDPwn")