proto-rdp

Audit RDP services for NLA, TLS, and known vulnerabilities.

Updated Jul 30, 2026
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-rdp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: proto-rdp
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/proto-rdp
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill proto-rdp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, safe, and policy-compliant method to audit Remote Desktop Protocol (RDP) services for misconfigurations and vulnerabilities without resorting to destructive exploitation or unauthorized access.

Core Features & Use Cases

  • Configuration Audit: Evaluates NLA status, TLS encryption strength, and certificate validity to identify hardening gaps.
  • Vulnerability Detection: Identifies exposure to known RDP vulnerabilities like BlueKeep and MS12-020 using non-destructive banner and protocol enumeration.
  • Use Case: A security engineer needs to verify that all internal Windows servers have NLA enabled and are patched against BlueKeep before a compliance audit.

Quick Start

Use the proto-rdp skill to perform a configuration and vulnerability audit on the target host at 192.168.1.50.

Frequently Asked Questions about proto-rdp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit RDP configuration and check for NLA enforcement?

You can audit RDP configuration by evaluating Network Level Authentication (NLA) posture and TLS encryption strength using non-destructive protocol enumeration. This skill identifies hardening gaps and verifies NLA enforcement across scoped network hosts.

Can I check for BlueKeep vulnerability without destructive exploitation?

You can detect BlueKeep exposure without destructive exploitation by using non-destructive banner grabbing and protocol enumeration. This skill safely identifies exposure to known RDP vulnerabilities like BlueKeep and MS12-020.

Do I need nmap to perform a Remote Desktop Protocol security assessment?

You need nmap with NSE scripts to perform this Remote Desktop Protocol security assessment. The skill relies on nmap to conduct banner grabbing and protocol enumeration while adhering to defined safety and authorization gates.

What is the safest way to enumerate RDP patch status for a compliance audit?

The safest way to enumerate RDP patch status is through non-destructive security assessments that evaluate protocol configurations. This skill identifies patch status for scoped network hosts to verify compliance without unauthorized access.

Does this RDP audit tool evaluate TLS encryption and certificate validity?

This RDP audit tool evaluates TLS encryption protocols and certificate validity. It performs configuration audits to identify weaknesses in encryption strength and certificate validation across targeted network hosts.

What are the limitations of using nmap NSE scripts for RDP vulnerability detection?

A limitation of using nmap NSE scripts for RDP vulnerability detection is that it relies strictly on non-destructive banner grabbing and protocol enumeration. It identifies exposure to flaws but does not perform active exploitation.