Jump to content

What packets are sent, shutdown.exe

- - - - -

  • Please log in to reply
1 reply to this topic

#1
liamzebedee

liamzebedee

    Programmer

  • Members
  • PipPipPipPip
  • 129 posts
Shutdown.exe, the windows shutdown application, has an arguement(-i) for a remote shutdown. A GUI pops up and you can remotely shutdown someones computer. What is the packet thats sent when this happens? What port is it on? And how can I find out this stuff in future?

#2
Alexander

Alexander

    It's Science!

  • Moderators
  • 4,118 posts
  • Location:Vancouver, Eh! Cleverness: 200
Windows and most system level applications that would require this behaviour would use the Remote Procedure Call (RPC) protocol as an inter-process method of communication. This is based on the TCP/IP(Wikipedia) protocol so it should not be much different than others based on that as well.

The ports used may vary, so some information can be read about it here as I do not have as much knowledge on this:
http://download.micr...2c/[MS-RSP].pdf (remote shutdown protocol (RSP) specification document)
How to configure RPC dynamic port allocation to work with firewalls (Dynamic RPC port of which RSP uses)
Be sure to read the updated FAQ! || Health is achieved through the same 10,000 steps.
If a suggested code/method fails, informing us is less important than telling us why or what errors occurred.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users