rdp_public

This presentation analyzes CVE-2019-0708 (RDP/BlueKeep), covering RDP protocol and component internals, patch and binary diffs, MCS/virtual channel handling, an RDP scanner/checker, kernel use-after-free exploitation flow (IcaChannel object), heap-spray and shellcode techniques for kernel-to-user code execution, demo notes, and recommended mitigations such as security-enhanced connection sequences (CredSSP/RDSTLS).