RDP笔记.1
包: 连接请求通信数据 X224_TPDU_CONNECTION_REQUEST
0x00B07F98 03 00 00 26 21 e0 00 00 00 00 00 43 6f 6f 6b 69 ...&!......Cooki
0x00B07FA8 65 3a 20 6d 73 74 73 68 61 73 68 3d 76 61 5f 61 e: mstshash=va_a
0x00B07FB8 64 6d 69 6e 0d 0a cd cd cd cd cd cd cd cd cd cd dmin............
03 version
00 保留
00 26 长度 (38 = 11 + 17 len(Cookie: mstshash=) + len(va_admin) + 2 len(0d 0a) )
21 0x0026=38-5=33=0x21 length-5
E0 X224_TPDU_CONNECTION_REQUEST
X224_TPDU_TYPE
X224_TPDU_CONNECTION_REQUEST = 0xE0,
X224_TPDU_CONNECTION_CONFIRM = 0xD0,
X224_TPDU_DISCONNECT_REQUEST = 0x80,
X224_TPDU_DATA = 0xF0,
X224_TPDU_ERROR = 0x70
00 00 dst_ref
00 00 src_ref
00 class
Cookie: mstshash=
Username
0d 0a
服务器请求确认 接收 (iso.c->322行)
0x00F40200 03 00 00 0b cd cd cd cd cd cd cd cd cd cd cd cd ................
03 version
00 保留
00 0B 共有 11 个字节 下面还有11-4=7个字节
0x00F40200 03 00 00 0b 06 d0 00 00 12 34 00 cd cd cd cd cd .........4......
06 lengthIndicator
D0 Code(高四位) and SubCode(低四位) Code=D0 SubCode=00 X224_TPDU_CONNECTION_CONFIRM
00 00
12 34
00