Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/infosecn1nja/SharpDoor
SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
https://github.com/infosecn1nja/SharpDoor
Last synced: about 2 months ago
JSON representation
SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
- Host: GitHub
- URL: https://github.com/infosecn1nja/SharpDoor
- Owner: infosecn1nja
- License: apache-2.0
- Created: 2019-09-29T02:24:07.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2019-09-30T16:11:24.000Z (over 5 years ago)
- Last Synced: 2024-11-13T04:52:07.153Z (2 months ago)
- Language: C#
- Size: 26.4 KB
- Stars: 306
- Watchers: 15
- Forks: 61
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-lists - infosecn1nja/SharpDoor - SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file. (C# #)
README
# SharpDoor
SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file, for opsec considerations SharpDoor still using cmd.exe to run sc services to impersonating as trustedinstaller in the future will be avoiding cmd.exe usage, currently only support for Windows 10.Author - Rahmat Nurfauzi ([@infosecn1nja](https://twitter.com/infosecn1nja))
## Example
```
beacon> execute-assembly /root/Toolkits/SharpBinaries/SharpDoor.exe
[*] Tasked beacon to run .NET program: SharpDoor.exe
[+] host called home, sent: 115243 bytes
[+] received output:
_____ _ _____
/ ____| | | __ \
| (___ | |__ __ _ _ __ _ __ | | | | ___ ___ _ __
\___ \| '_ \ / _` | '__| '_ \| | | |/ _ \ / _ \| '__|
____) | | | | (_| | | | |_) | |__| | (_) | (_) | |
|_____/|_| |_|\__,_|_| | .__/|_____/ \___/ \___/|_|
| |
v1.0.0 |_|Allow Multiple RDP (Remote Desktop) Sessions By Patching termsrv.dll File
[*] Termsrv.dll Version : 10.0.17763.1
[*] Stop termservice[+] received output:
[*] Backup termsrv.dll to C:\Users\Public\termsrv.dll[*] Attempting to patch termsrv.dll
Original File Hash : 24ff1f89f2ec3f5561c34810c8328726
Patched File Hash : 4cec28b4c00002245dffc8346be0cc11[*] C:\Users\Public\termsrv.patch.dll was patched successfully
[*] Setting Registry Terminal Server\fSingleSessionPerUser to 0
[*] Setting Registry Terminal Server\TSAppAllowList\fDisabledAllowList to 1
[*] Start termservice
[*] Done
```