如何检测远程计算机是否正在运行RDP？
如何检测远程客户端是否正在运行远程桌面协议？并且它还接受远程桌面连接??
就像打开一个端口来检测HTTP并发送请求，接收请求标头并在请求标头中查看有关HTTP的信息，这样我就知道这个人正在运行HTTP天气，如果他改变了端口例如：运行 HTTP 6551。
How do I detect if a remote client is running Remote Desktop Protocol? and it is also accepting remote desktop connections ??
Like Open an port to detect HTTP and send request, receive request headers and see in request headers information about HTTP so I will know the person is running HTTP weather if he changed the port e.g: running HTTP 6551.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
您可以在命令行中执行 netstat -a 并查看远程桌面连接的默认端口是否正在侦听，即。 TCP:3389 但这仅适用于客户端未更改 MSTSC 端口的情况
You could do netstat -a in the command line and see if the default port for remote desktop connection is listening, ie. TCP:3389 but thats only if the client hasn't changed the ports for MSTSC
尝试与 RDP 连接感知的内容建立连接（RDP 不是 HTTP）。当然，无法建立初始握手并不能证明无法建立连接。它可能被防火墙、侦听另一个端口等阻止。
MS-RDPBCGR 规范第 16 页讨论了连接，而连接又遵循 X.224，请看图。
最简单的方法可能是使用 Wireshark 并观察野外行为以开发最小的检测案例。我怀疑只需要生成/重播握手的最初部分，以便“决定”它是侦听 RDP 服务器。
（或者，也许使用具有“测试连接”功能或编写脚本的能力的现有 RDP 客户端。）
Attempt and make a connection with something that is RDP-connection aware (RDP is not HTTP). Of course, failing to establish an initial handshake is not proof that a connection can not be established. It could be blocked by a firewall, listening on another port, etc.
The MS-RDPBCGR specification, page 16 talks about connecting which in turn defers to X.224, go figure.
It'd likely just be easiest to use Wireshark and observe in-the-wild behavior to develop a minimal detection case. I suspect only the very initial portion of the handshake needs to be generated/replayed in order to "decide" that it's a listening RDP server.
(Or, perhaps use an existing RDP client which has this "test connect" functionality or the ability to be scripted.)
一种快速方法是编写一个 shell 并输入
If you get a connect, 很可能 RDP 服务器位于另一端。 RDP 可以在任何端口上运行，但默认设置 TCP 端口 3389。
Windows 7 需要 一些额外的步骤来启用 telnet 客户端。
A fast way is to pen a shell and type
If you get a connection, chances are good that an RDP server is on the other side. RDP can run on any port, but TCP Port 3389 is set per default.
Windows 7 requires some extra steps to enable the telnet Client.