Port enumeration

With nmap I found a RDP service in port 3389. d88fd6f0365cedb903a7102e2e95466b.png

RDP connection

Using any RDP client Im able to connect as Administrator without password. 2435cfaf4b313a011b2f74dd98bda012.png c1ca5ec339e02916c0a5139047c923c4.png In the windows desktop, I see the flag in a notepad. 04eb8ff1209b6bdf353b1644ec3fe80a.png