TLDR Tech / InfoSec
Decrypting MultiDesk Passwords
MultiDesk RDP client's password encryption was reverse-engineered, revealing RC4 encryption with per-user keys stored in the HKEY_CURRENT_USER\Software\MultiDesk\key registry hive across both legacy (v3.16) and modern (v14.0) versions. Version 3.16 used base64-encoded RC4 ciphertext with rdtsc-generated keys, while version 5+ introduced a salted key derivation scheme using CryptGenRandom, but remained fundamentally RC4-based. Pentesters should add MultiDesk.xml, MultiDesk.multidesk, and the associated registry keys to their internal recon checklists, as credential recovery is trivial with local admin or user-level access to the target machine.
Read the full story