RDP笔记(一)

 

RDP笔记.1

 

包: 连接请求通信数据 X224_TPDU_CONNECTION_REQUEST

0x00B07F98 03 00 00 26 21 e0 00 00 00 00 00 43 6f 6f 6b 69 ...&!......Cooki

0x00B07FA8 65 3a 20 6d 73 74 73 68 61 73 68 3d 76 61 5f 61 e: mstshash=va_a

0x00B07FB8 64 6d 69 6e 0d 0a cd cd cd cd cd cd cd cd cd cd dmin............

 

03 version

00 保留

00 26 长度 (38 = 11 + 17 len(Cookie: mstshash=) + len(va_admin) + 2 len(0d 0a) )

21 0x0026=38-5=33=0x21 length-5

E0 X224_TPDU_CONNECTION_REQUEST

X224_TPDU_TYPE

X224_TPDU_CONNECTION_REQUEST = 0xE0,

        X224_TPDU_CONNECTION_CONFIRM = 0xD0,

        X224_TPDU_DISCONNECT_REQUEST = 0x80,

        X224_TPDU_DATA = 0xF0,

        X224_TPDU_ERROR = 0x70

00 00 dst_ref

00 00 src_ref

00 class

Cookie: mstshash=

Username

0d 0a

 

服务器请求确认 接收 (iso.c->322行)

0x00F40200 03 00 00 0b cd cd cd cd cd cd cd cd cd cd cd cd ................

03 version

00 保留

00 0B 共有 11 个字节 下面还有11-4=7个字节

0x00F40200 03 00 00 0b 06 d0 00 00 12 34 00 cd cd cd cd cd .........4......

06 lengthIndicator

D0 Code(高四位) and SubCode(低四位) Code=D0 SubCode=00 X224_TPDU_CONNECTION_CONFIRM

00 00

12 34

00