Microsoft Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution

This strike replicates an attack known as Bluegate against Remote Desktop Gateway (RDG), exploiting a heap buffer overflow. The flaw is due to unsanitized index parameters when parsing large UDP packets. Successful exploitation allows the attacker to execute arbitrary code on the target system, with the privileges of the user running the RDG daemon. NOTE: Normally, a connection to the RDG is formed through DTLS(Datagram TLS). After the initial handshake, all the conversation is encrypted. To showcase the actual malicious bytestream message, the strike is implemented in such a way as to present the exchange in plain, devoid of any encryption.