Scorecard: pyrdp — rdp

Status: Informative · evaluation proof (not an endorsement)
UHBS: 4.2.2 · Class: Low-Interaction · Protocol / surface: rdp
Target id (lab): pyrdp-rdp · Evaluation date: 2026-07-29

Run	UHQS	Grade	δ_C	Proof artifacts
Quick	see report hub quick artifacts	—	—	Report hub
Full (authoritative)	33.93	F	0.5625	Verbatim SCORECARD below

Report hub: pyrdp / rdp

Proof: module scores (full run)

Module	Score	Weight	Status	Notes
Module A: Protocol Fidelity	50.0	0.30	PARTIAL	no reply
Module B: Behavioral Realism	50.5	0.15	PARTIAL	r1= r2= e=-
Module C: Telemetry Quality	55.0	0.25	PARTIAL	2 malformed / 2 records
Module D: Safety & Containment (C)	75.0	GATE	PASSED	UHBS_AIRGAP_ATTESTED=1 (operator attestation; not a substitute for shell probes on SSH decoys)
Module E: Scalability & Latency	100.0	0.10	PASSED	service alive after load (connect 0.2ms)
Module F: Static Code Audit	70.0	0.20	PASSED	POSIX coverage 0% (0/104)
Safety Gate δ_C	—	GATE	—	Containment multiplier

How CTI / blue team should read this

Module	Score	Analyst reading
A — Protocol Fidelity	50.0	Protocol speak / banner-handshake quality for keeping automated clients engaged.
B — Behavioral Realism	50.5	Post-connect realism (auth/session). Low often means credential-only or reject-by-design.
C — Telemetry Quality	55.0	Harness-visible telemetry — not your SIEM pipeline maturity.
D — Safety & Containment (C)	75.0	Containment / Safety Gate. Below threshold collapses UHQS via δ_C.
E — Scalability & Latency	100.0	Latency vs profile P95. Low can mean timeouts, tarpits, or slow handlers.
F — Static Code Audit	70.0	Static audit of the graded source tree — hygiene signal, not a full CVE program.

Verbatim full SCORECARD

====================================================================================
                  UNIVERSAL HONEYPOT BENCHMARK SCORECARD v4.2.2
====================================================================================
Target System         : pyrdp-rdp
System Profile Class  : Low-Interaction
Protocols             : rdp
Evaluation Date       : 2026-07-29
Evaluation Type       : Full-Spectrum (Static Audit + Dynamic Sandbox)
Environment           : Isolated Sandbox
MCP Surface Depth     : unknown
------------------------------------------------------------------------------------
EVALUATION MODULE                     SCORE (0-100)    WEIGHT    STATUS
------------------------------------------------------------------------------------
Module A: Protocol Fidelity         :  50.0/100       0.30     PARTIAL (no reply)
Module B: Behavioral Realism        :  50.5/100       0.15     PARTIAL (r1= r2= e=-)
Module C: Telemetry Quality         :  55.0/100       0.25     PARTIAL (2 malformed / 2 records)
Module D: Safety & Containment (C)  :  75.0/100       GATE     PASSED (UHBS_AIRGAP_ATTESTED=1 (operator attestation; not a substitute for shell probes on SSH decoys))
Module E: Scalability & Latency     : 100.0/100       0.10     PASSED (service alive after load (connect 0.2ms))
Module F: Static Code Audit         :  70.0/100       0.20     PASSED (POSIX coverage 0% (0/104))
------------------------------------------------------------------------------------
SAFETY GATE MULTIPLIER                : δ_C = 0.5625 (C = 75.0 < 95 — exponential penalty)
FINAL COMPOSITE SCORE (UHQS 4.2.2)      : 33.93 / 100
OVERALL EVALUATION GRADE              : GRADE F (Fail)
====================================================================================