Check for anonymous login xfreerdp /v:host-ip /u:username # don't give any password Check for login using leaked creds Login cracked creds using hydra