生成RDP文件

最新推荐文章于 2026-04-17 09:12:56 发布

原创最新推荐文章于 2026-04-17 09:12:56 发布 · 3k 阅读

3 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#buffer #file #credentials #null #compression

这篇博客介绍了一个C++函数，用于生成RDP（远程桌面协议）文件。函数涉及MBCS到宽字符转换、密码加密、以及向文件写入RDP配置信息，包括IP地址、用户名和加密后的密码等关键参数。

bool MBCSToWide(char * MBCS,WCHAR * Wide)
{
if (!MBCS || !Wide)
{
return false;
}
MultiByteToWideChar(CP_OEMCP,MB_PRECOMPOSED,MBCS,strlen(MBCS),Wide,254);
return true;
}

bool EncryptPassword(char * Password,char * Buffer,int * BufferLen)
{
    if(!Password || !Buffer || !BufferLen || *BufferLen <= 0){
        return false;
    }
    WCHAR WPass[255];
    MBCSToWide(Password,WPass);
    int Len = strlen(Password) * sizeof(WCHAR);
    DATA_BLOB Input;
    DATA_BLOB Output;

    Input.pbData = (BYTE *)WPass;
    Input.cbData = Len;
    if(CryptProtectData(&Input,L"Password",NULL,NULL,NULL,0,&Output)){
        for(int i = 0;i < Output.cbData;i++){
            sprintf(Buffer + i * 2,"%02X",Output.pbData[i]);
        }
        *BufferLen = Output.cbData * 2;
        *(Buffer + *BufferLen) = '/0';
    }else{
        return false;
    }
}

bool Write(HANDLE File,char * Buffer,char * Fmt,...){
    if(File != INVALID_HANDLE_VALUE && Buffer){
        va_list Ptr;
        va_start(Ptr,Fmt);
        vsprintf(Buffer,Fmt,Ptr);
        va_end(Ptr);
        int Len = strlen(Buffer);
        DWORD DwWrited = 0;
        WriteFile(File,Buffer,Len,&DwWrited,NULL);
        return true;
    }else{
        return false;
    }
}

bool CreateRDPFile(char * FilePath,char * IP,char * UserName,char * Password)
{
    if(!FilePath || !IP)
    {
        return false;
    }

    HANDLE File = CreateFile(FilePath,GENERIC_READ | GENERIC_WRITE,FILE_SHARE_READ,NULL,CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL | FILE_ATTRIBUTE_HIDDEN,NULL);
    if(File != INVALID_HANDLE_VALUE){
        char Buffer[255] = {0};
        Write(File,Buffer,"screen mode id:i:1/n");
        Write(File,Buffer,"desktopwidth:i:800/n");
        Write(File,Buffer,"desktopheight:i:600/n");
        Write(File,Buffer,"session bpp:i:24/n");
        Write(File,Buffer,"winposstr:s:0,1,493,127,1301,761/n");
        Write(File,Buffer,"full address:s:%s/n",IP);
        Write(File,Buffer,"compression:i:1/n");
        Write(File,Buffer,"keyboardhook:i:1/n");
        Write(File,Buffer,"audiomode:i:0/n");
        Write(File,Buffer,"redirectdrives:i:0/n");
        Write(File,Buffer,"redirectprinters:i:0/n");
        Write(File,Buffer,"redirectcomports:i:0/n");
        Write(File,Buffer,"redirectsmartcards:i:1/n");
        Write(File,Buffer,"displayconnectionbar:i:1/n");
        Write(File,Buffer,"autoreconnection enabled:i:1/n");
        if(UserName){
            Write(File,Buffer,"username:s:%s/n",UserName);
        }else{
            Write(File,Buffer,"username:s:/n");
        }
        Write(File,Buffer,"alternate shell:s:/n");
        Write(File,Buffer,"shell working directory:s:/n");
        Write(File,Buffer,"disable wallpaper:i:1/n");
        Write(File,Buffer,"disable full window drag:i:1/n");
        Write(File,Buffer,"disable menu anims:i:1/n");
        Write(File,Buffer,"disable themes:i:0/n");
        Write(File,Buffer,"disable cursor setting:i:0/n");
        Write(File,Buffer,"bitmapcachepersistenable:i:1/n");
        Write(File,Buffer,"allow desktop composition:i:0/n");
        Write(File,Buffer,"allow font smoothing:i:0/n");
        Write(File,Buffer,"redirectclipboard:i:1/n");
        Write(File,Buffer,"redirectposdevices:i:0/n");
        Write(File,Buffer,"authentication level:i:0/n");
        Write(File,Buffer,"prompt for credentials:i:0/n");
        Write(File,Buffer,"negotiate security layer:i:1/n");
        Write(File,Buffer,"remoteapplicationmode:i:0/n");
        Write(File,Buffer,"gatewayhostname:s:/n");
        Write(File,Buffer,"gatewayusagemethod:i:4/n");
        Write(File,Buffer,"gatewaycredentialssource:i:4/n");
        Write(File,Buffer,"gatewayprofileusagemethod:i:0/n");
        Write(File,Buffer,"promptcredentialonce:i:1/n");
        if(Password){
            char Encrypted[1024 * 5] = {0};
            strcpy(Encrypted,"password 51:b:");
            int Temp = strlen(Encrypted);
            int Len = 1024 * 5 - Temp;
            if(EncryptPassword(Password,&Encrypted[Temp],&Len)){
                strcat(Encrypted,"/n");
                Len = strlen(Encrypted);
                DWORD DwWrited = 0;
                WriteFile(File,Encrypted,Len,&DwWrited,NULL);
            }
        }
        Write(File,Buffer,"domain:s:/n");
        CloseHandle(File);
        File = INVALID_HANDLE_VALUE;
        return true;
    }