Ergebnis der Suchanfrage

• Forum: Win32/Win64 API (native code)

  Re: Password hash in RDP files

    Delphi
    by shmia, 20. Mär 2007
  On my machine the hash is always 1329 chars long, too.
  This is a little bit strange, because it should be a even number.
  
  I've found some C code to decode the hashtext:
  http://archives.neohapsis.com/archives/sf/pentest/2002-12/0045.html
  Maybe MSTSC uses a different "Description" every time it calls CryptProtectData.
  You could try to decrypt a hash created by MSTSC to see the description....
• Forum: Win32/Win64 API (native code)

  Re: Password hash in RDP files

    Delphi
    by shmia, 20. Mär 2007
  The *.RDP file is stored using UNICODE.
  The file starts with the BOM (Byte Order Mark): $FF$FE to indicate that the file is using UNICODE.
  You could easily view and edit the content the file with the Wordpad application; just draw & drop the file on Wordpad.
  
  Sorry, but your code looks a bit like spaghetti.
  Why don't you use a function to calculate the hash for the password ?
  function...