pyrdp icon indicating copy to clipboard operation
pyrdp copied to clipboard

Add basic support for parsing Dynamic Channels (drdynvc)

Open Res260 opened this issue 4 years ago • 1 comments

While working on a CTF challenge, I wanted to test some things with the dynamic channels (if you come across this PR in the context of said CTF, this PR will NOT help you solve the challenge), so I built a basic MITM object to interact with them.

For reference, dynamic channels ( https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpedyc/3bd53020-9b64-4c9a-97fc-90a79e7e1e06 ) is the "new and improved" way to extend RDP functions

Some examples of channels that were opened using win10 mstsc to another win10 machine: image image image image

I'll leave this PR as a WIP because it has not been tested enough to go to production and the current logs do not bring a lot of values. However, if we ever plan to implement a sub-MITM for a specific dynamic channel, this might come in handy!

Res260 avatar Jun 14 '20 19:06 Res260

Damn, I screwed up...

Edit: Phew! I managed to revert all that.

obilodeau avatar Aug 24 '21 16:08 obilodeau