PoC repo for abusing Microsoft-signed rdpbase.dll as a BYOK RC4 primitive, with Python encrypt/decrypt scripts.

Repo documents tlscsp.dll as an RC4 primitive, patching its key in memory before LsCsp_EncryptHwid.

Microsoft's 26H1 preview adds standalone ML-KEM TLS key exchange, not just the usual hybrid hand-holding.