SySS-Research/Seth

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1454 stars · 319 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Seth is a Python and Bash proof-of-concept tool that performs a man-in-the-middle attack on RDP connections via ARP spoofing, downgrading the connection to extract clear text credentials. It can also inject keystrokes to execute commands on the RDP host.

Use cases

• demonstrate RDP downgrade attacks in pentests
• extract clear text credentials from RDP sessions
• perform ARP spoofing MitM against RDP traffic
• inject commands on an RDP host via key press events
• educate about insecure RDP configurations in workshops

When to choose

• you need a PoC to show RDP credential exposure during an authorized pentest
• you want to demonstrate why RDP connections must be properly configured
• you need to combine an RDP proxy with tools like Responder

When to avoid

• you need a general-purpose network scanner or full pentest framework
• you require stealthy or production-grade attack tooling
• the target uses keyboard layouts other than English US for keystroke injection
• you lack authorization to test the target network

Facets

cli-tool · maturity maintenance

security penetration-testing networking proxy security penetration-testing networking cli python rdp mitm arp-spoofing credential-sniffing proof-of-concept pentest linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SySS-Research/Seth")