文件名称:
RDP 从补丁到远程代码执行 - 看雪峰会2019.pdf
开发工具:
文件大小: 8mb
下载次数: 0
上传时间: 2019-07-21
详细说明：RDP 从补丁到远程代码执行 - 看雪峰会2019.pdf.........2D19夏呈开反音喉
2019 Security Development Conference
目录
1.RDP协议基础知识介绍
2.CVE2019-0708补丁分析
3.扫描器原理
4.内核漏洞利用
5. Demo
6.缓解策略
2D19夏呈开反音喉
2019 Security Development Conference
RDP协议基础知识介绍
终端服务
RDP组件及架构
协议
2D19夏呈开反音喉
2019 Security Development Conference
老式终端服务
WindowsⅩP
>Windows server 2003
>Windows 7
>Windows server 2008 R2
2D19夏呈开反音喉
2019 Security Development Conference
终端服务内核组件
dowd. sys
rdpdr sys
MCS Stack
Device\RdpDr
Device\ Rdp DrPort
Device\RdpDrDvMgr
\tsclient\
termdd.sys
K RDPDR
Device\Termdd
tdpipe sys
rdpcdd sys
dtcp.sys
\Device ltdpipe
CTXT》
\Deviceltdtcp
2D19夏呈开反音喉
2019 Security Development Conference
终端服务用户态组件
caapi
oi. dll
Svchost. exe
Use <\Device\Termdd>
终端服务
terms, dl
\pipe\ ctx Win Station API service
rdpclip. exe
terms. dll
rdpwsx dll
剪切板支持
RPC客户端 wrapper
MCs/GCC协议栈
wtsapi32dll
高级AP
2D19夏呈开反音喉
2019 Security Development Conference
现代终端服务
Windows 8
>Windows server 2012
>Windows lo
>terminput sys
Rdpbase dll
> Rdpcore dll
>Rdpserverbase dIl
Client
Server
-X224 Connection Request PDU-
Connection Initiation
-X 224 Connection Confirm PDU-
MCS Connect Initial PDU with GCC Conference Create Request-
RDP协议
Basic Settings Exchange
-MCS Connect Response PDU with GCC Conference Create Response-
-MCS Erect Domain Request PDU-
MCS Attach User Request PDU
MCS Attach User Confirm PDU-
Channel Connection
01234567890123456789012345678901
MCS Channel Join Request PDU(s)-
-MCS Channel Join Confirm PDU(s)
tpktHeader
Security Exchange pDu-
RDP Security Commencement
X224Crq
Client Info pDu-
Secure Settings Exchange
Auto-Detect Request PDU(s
routing Token(variable)
Optional Connect-Time
Auto-Detect Response PDU(s)-
Auto-Detection
License Error PDu-Valid Client
Licensing
Initiate Multitransport Request PDU
cookie(variable)
Optional multitransport
nitiate Multitransport Response PDU
Bootstrapping
Demand Active pdu-
rdpNegReq (optional)
Monitor Layout PDU
Capabilities Exchange
-Confirm Active pdu-
-Synchronize pDu-
rdpCorrelationInfo(36 bytes, optional)
Control PDU-Cooperate-
-Control PDU-Request Control
Persistent Key List PDU(s)
-Font List pDu-
Connection Finalization
Synchronize PDu-
Control PDu -Cooperate
客户端Ⅹ.224连接请求数据报
-Control pdu- granted Control
nt Map pDU-
RDP链接建立通信序列
2D19夏呈开反音喉
2019 Security Development Conference
MCS协议
User application(s
(using both standard and non-standard application protocols)
User application(s)
Node
User application(s)
(using standard application protocols)
using non-standard protocols
多点通信协议(MCS):一系列由1TU定义的通
TIt-TRec. T127(MBFT)
信协议标准,包括T.120T122T125等
ITU-TRcc. T 126(SD)
Application protocol entity
ITU-T RcC. T 12
Nor-standard application
application protocol
protocol entity
Recommendalions
Gencric conference control (GCC)
IIU-T ReD. T124
Multipoint communication service(MCS
ITU-T Recs T 122 and T125
Network-specific transport protocols
ITL -T Rec..123
IIU-IRec1120 infrastructure recomnendations
(系统自动生成,下载前可以参看下载内容)
下载文件列表
相关说明
- 本站资源为会员上传分享交流与学习,如有侵犯您的权益,请联系我们删除.
- 本站是交换下载平台，提供交流渠道，下载内容来自于网络，除下载问题外，其它问题请自行百度。
- 本站已设置防盗链，请勿用迅雷、QQ旋风等多线程下载软件下载资源，下载后用WinRAR最新版进行解压.
- 如果您发现内容无法下载，请稍后再次尝试；或者到消费记录里找到下载记录反馈给我们.
- 下载后发现下载的内容跟说明不相乎，请到消费记录里找到下载记录反馈给我们，经确认后退回积分.
- 如下载前有疑问，可以通过点击"提供者"的名字，查看对方的联系方式，联系对方咨询.
