Andy Dixon 455d8fa6da feat(rdp): Kerberos logon through a configured KDC
An RDP profile can name a Kerberos KDC; CredSSP then authenticates with
Kerberos instead of NTLM, reaching the KDC through a small TCP client
(RFC 4120 length-prefixed framing, 5 s connect / 10 s read timeouts,
replies capped at 1 MiB so a hostile KDC can't force a huge allocation).
UDP KDCs are refused with a clear message. Tested against a fake KDC
(round trip, oversized reply, UDP); not against a real realm.

Smart-card logon is not implemented: it needs PC/SC hardware and a card
to build and test against.
2026-10-12 18:30:30 +01:00

Nexus Terminal

A native desktop client for SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local terminals — with secure credential handling and a focused, multi-session workflow.

Nexus Terminal helps you manage many connections at once, keep terminal work organised, and move files with confidence. It is a single Rust application with no webview, so it starts quickly and stays responsive under heavy terminal output.

Highlights

  • SSH, Telnet, RAW TCP, Serial, VNC, RDP, IRC, GitHub and local terminal sessions in one app
  • Tabbed sessions with split panes, pinning and drag-to-reorder
  • SFTP browser with drag-and-drop uploads and a permission-aware directory picker
  • SSH jump hosts, SOCKS5/HTTP proxies, local and remote port forwards, agent forwarding and TOTP auto-fill
  • Serial consoles with full line settings (baud, data bits, parity, stop bits, flow control)
  • Native VNC and RDP viewers; RDP with NLA, certificate pinning, and SOCKS5/HTTP proxy or SSH tunnel routes
  • Disconnected overlay with one-click reconnect, and auto-reconnect with backoff
  • Broadcast input, snippets, trigger rules and terminal search
  • Session recording (asciicast v2) and playback
  • Secure credential storage with the OS keychain first and an encrypted vault fallback

Quick start

  1. Launch Nexus Terminal.
  2. Click + at the bottom of the sidebar (or press Cmd+N / Ctrl+N) and create a connection profile.
  3. Click Create & Connect to save it and open a session in a new tab. Afterwards, click the profile in the sidebar to connect.

Prefer a one-off session? Use Cmd+Shift+Q / Ctrl+Shift+Q to quick connect, or click Local Machine in the sidebar for a local shell.

If a session drops, use the Reconnect button in the disconnected overlay.

Documentation

Keyboard shortcuts

All shortcuts use Cmd on macOS and Ctrl on Windows/Linux.

macOS Shortcut Windows/Linux Shortcut Action
Cmd + K Ctrl + K Open command palette
Cmd + N Ctrl + N New connection
Cmd + W Ctrl + W Close current tab
Cmd + Tab Ctrl + Tab Next tab
Cmd + Shift + Tab Ctrl + Shift + Tab Previous tab
Cmd + 1–9 Ctrl + 1–9 Switch to tab by number
Cmd + , Ctrl + , Open settings
Cmd + F Ctrl + F Find in terminal
Cmd + Shift + D Ctrl + Shift + D Split pane right (side by side)
Cmd + Shift + E Ctrl + Shift + E Split pane down (top and bottom)
Cmd + Shift + R Ctrl + Shift + R Toggle session recording
Cmd + Shift + B Ctrl + Shift + B Toggle broadcast input mode
Cmd + Shift + S Ctrl + Shift + S Open snippet library
Cmd + Shift + Q Ctrl + Shift + Q Quick connect
F11 F11 Toggle fullscreen

Building from source

Nexus Terminal is a Rust workspace in rust/. With rustup installed:

cd rust
cargo run --release

See docs/build-and-release.md for platform prerequisites, tests and release packaging.

S
Description
Open-source native desktop client for SSH, SFTP, Telnet, Serial, VNC, RDP, IRC and GitHub, written in Rust. AGPL-3.0.
https://dixon.cx/nexus Readme AGPL-3.0
32 MiB
v3.0.2
Latest
2026-10-13 14:16:27 +02:00
Languages
Rust 97.6%
Shell 1.5%
PHP 0.9%