Extract BMC (RDP cached bitmap).
This script parses RDP cache files selected by the user.
RDP Bitmap Cache parser
RDP Bitmap Cache parser.
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member ... Read More...
© 2019 Copyright | DFIR Training