Troubleshooting - Anydesk

[admin]

This is a problem that can happen during pentest when installing anydesk for remote access. In Windows, there is a security feature called secure logon that implements the functionality of pressing the Ctrl+Alt+Delete key to launch the user logon screen. When secure logon is enabled, connecting to the remote computer via GUI becomes a hassle and we will fail. We can view the login screen, but we cannot interact with it by pressing Ctrl+Alt+Delete to enter the username and password to authenticate us.

Considering that we have administrative access to the system, then what we have to do is disable secure logon by creating new values in the registry. We created these values:

reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DisableCAD /t REG_DWORD /d 1 /f
reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DisableCAD /t REG_DWORD /d 1 /f
reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableCAD /t REG_DWORD /d 1 /f

Now that the values have been defined, we need to restart the computer to validate the created values. Before restarting the computer you must make sure that the user is away from the computer. If you have a meterpreter session type idletime. After the computer has restarted you can then successfully connect to anydesk.

ID anydesk: 1586116835
pass: Cyber%@89

user: default
pass: 39E0F@!F9dFw

Insider