PyRDP

Web Console

Overview

◉ Dashboard

Tools

⬡ MITM Proxy 0

⟳ Converter

◈ Cert Cloner

Data

▶ Replays

□ Files

≡ Logs

PyRDP v2.1.0

Dashboard

System overview and activity at a glance

Active Sessions

Recent Tasks

MITM Proxy

Intercept and monitor RDP connections

New Session

Target IP:Port

Listen Address

Listen Port

Log Level

Username Override

Password Override

Private Key (.pem)

Certificate (.pem)

Auth Mechanisms

Sensor ID

Payload Command

PowerShell Payload

Payload Delay (ms)

Payload Duration (ms)

NLA Redirect Host

NLA Redirect Port

SSP Challenge

Drive Crawling

Disable Replay

No Downgrade

No File Extraction

Disable Clipboard

Transparent Mode

Disable GDI (recommended — prevents screen tearing)

Sessions

Live Output

Select a session to view logs

Converter

Transform .pyrdp replays and .pcap captures

Convert File

Input File Path

Output Format

Output Path

SSL Secrets File

Source Filter

Destination Filter

Output

Run a conversion to see output

Certificate Cloner

Duplicate RDP server certificates for interception

Clone Certificate

RDP Host

RDP Port

Output Certificate Filename

Output Key Filename

Existing Key (optional)

Log Level

Output

Clone a certificate to see output

Replays

Recorded RDP session archives

Recorded Sessions

Files

Captured files, filesystems, and certificates

Logs

Browse PyRDP log output

Log Files

Log Viewer

Select a log file to view

Replay Player

Converting replay to video…

Session Events