dagowda / notRDP

# notRDP
A Havoc C2 plugin that creates an invisible alternate Windows desktop, streams it to a browser-based viewer, and supports full mouse/keyboard interaction like RDP, but invisible to the target user.
## How It Works
1. Creates a hidden desktop via `CreateDesktopW` and launches `explorer.exe` on it
2. Captures the hidden desktop using `PrintWindow` compositing and streams JPEG frames
3. Injects mouse/keyboard input via `PostMessage` directly to hidden desktop windows
4. Renders the stream in a browser viewer with full input capture
## Prerequisites
Cross-compiler: `x86_64-w64-mingw32-gcc` (and optionally `i686-w64-mingw32-gcc` for x86)
### Install on Ubuntu / Debian / Kali
 [code] 
### Install on Arch
 [code] 
### Install on Fedora
 [code] 
## Compiling
 [code] 
### Manual (without Make)
 [code] 
## Installation
1. Compile the BOFs
2. In the Havoc Client: **Scripts Manager > Load Script > notrdp.py**
## Usage
 [code] 
## notrdpuser Plugin
A variant plugin that captures the user's real desktop session instead of creating a hidden one. Includes opsec-friendly keystroke capture via GetAsyncKeyState polling embedded in the screenshot BOF. Packaged as notrdpuser.zip in the same repo extract and load notrdpuser.py the same way.
 [code]