Skip to content

v1.0.0

Choose a tag to compare

View all tags
@adyoi adyoi released this 16 Oct 07:25
· 47 commits to main since this release
v1.0.0
8a1af32

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

1.0.0 - 2026-10-16

First release. The RDP connection sequence, implemented from Microsoft's public
Open Specifications, verified byte-for-byte against a live Windows RDP server.

Added

  • X.224 / T.125 connection request (MS-RDPBCGR 2.2.1.1) with TPKT framing.
  • RDP negotiation exchange (2.2.1.1.1, 2.2.1.2.1): RDP_NEG_REQ / RDP_NEG_RSP,
    optional correlation block with CORRELATION_INFO_PRESENT.
  • MCS Connect Initial / Connect Response (2.2.1.3.4, 2.2.1.3.5) including the
    GCC Conference Create Request.
  • Client data blocks (2.2.1.3.4.1–.5): TS_UD_CS_CORE, TS_UD_CS_SECURITY,
    TS_UD_CS_NET, TS_UD_CS_CLUSTER, TS_UD_CS_USER.
  • MCS domain and channel setup (2.2.1.3.6–.8): Erect Domain Request,
    Attach User Request, Channel Join Request, Send Data Request framing.
  • T.125 Disconnect Request for orderly close.
  • WinUI 3 desktop app with a connection form and a timestamped handshake log.
  • rdpprobe console harness for exercising the handshake without the GUI;
    reads the password from RDP_PASSWORD and never echoes it.
  • Protocol-layer unit tests pinned to bytes captured from mstsc.exe.
  • Documentation site, logo, and application icon set.

Platform

  • Windows on x64, ARM64 and x86.
  • Windows only: WinUI 3 has no macOS or Linux implementation. The protocol core
    targets plain .NET and carries no UI dependency, so it can be reused from a
    cross-platform front end if one is written.

Not implemented

Stated plainly so nobody mistakes this for a working desktop viewer:

  • RSA key exchange and RC4/AES session keys (2.2.1.4.3, 5.3.2)
  • CredSSP / NLA — TLS + SPNEGO + NTLM (MS-RDPEA)
  • Capability set exchange (2.2.7)
  • Bitmap, pointer and order graphics pipeline (2.2.9)
  • Keyboard and pointer input (2.2.8)
  • Virtual channel data: clipboard, drive, audio (2.2.6)

Security

Credentials are transmitted as UTF-16 in TS_UD_CS_USER over the classic RDP
handshake, in clear. CredSSP is not implemented, so use only against hosts you
control or over a trusted, encrypted transport.

Fixed during development

These were found by comparing emitted bytes against a recorded mstsc.exe
exchange; each produced a malformed PDU that a server answered with an immediate
reset.

  • TPKT length is big-endian while the rest of the connection sequence is
    little-endian.
  • The X.224 length indicator precedes the TPDU code; TPKT orders its length last.
  • TS_UD_CS_* headers are 16-bit little-endian values, not single bytes.
  • TS_UD_CS_* TLV headers are 6 bytes: type(2), flags(2), length(2).
  • MCS integers are plain fixed-width values with no T.125 selector bits.
  • The GCC conference name length is counted in UTF-16 code units, not bytes.
Assets 2
Loading