Impacket RDP Check

Check if credentials are valid for RDP access

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: impacket-rdp_check
Category: Enumeration / Network Discovery
Platform: linux
Requires: password
Protocols: RDP

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

impacket-rdp_check '<domain>/<user>:<password>'@'<ip>'

Credential variants

The same attack using a different authentication material.

NTLM Hash requires NTLM hash

impacket-rdp_check -hashes ':<hash>' '<domain>/<user>'@'<ip>'

Examples

impacket-rdp_check 'CORP.LOCAL/user:password'@192.168.1.100

Tags

impacket rdp credential-check enumeration

Impacket DumpNTLMInfo Dump NTLM server information (OS version, domain, hostname) without credentials
Impacket RPCDump Enumerate RPC endpoints and interfaces registered on a remote host
NetExec RDP NLA Screenshot Capture a pre-auth RDP login screen against hosts that have NLA enabled. Reveals OS…
Nmap TCP Scan Comprehensive TCP port scan with service version detection and default scripts