Uhlalutyo lokunokwenzeka kokuthintela isicelo sokulawulwa kwekhompyutheni ekude kwinethiwekhi, usebenzisa umzekelo we-AnyDesk

Ngenye imini umphathi wabuza lo mbuzo: “Kutheni abanye abantu bekwazi ukufikelela bekude kwikhompyutha yomsebenzi, ngaphandle kokufumana imvume eyongezelelekileyo yokusebenzisa?”
Umsebenzi uvela "ukuvala" i-lophole.

Kukho intaphane yezicelo zolawulo olukude kuthungelwano: Idesktop ekude yeChrome, iAmmyAdmin, iLiteManager, iTeamViewer, nayiphi na indawo yoLawulo, njl.njl. Ukuba ideskithophu ekude yeChrome inencwadana esemthethweni yokulwa ukufikelela kwinkonzo, iTeamViewer inezithintelo zelayisensi ngexesha okanye izicelo. ukusuka kwinethiwekhi kunye nabasebenzisi "basik' amazinyo" ngandlela thile okanye enye "bakhanye" kunye nee-admins, emva koko intandokazi yabaninzi kusetyenziso lomntu siqu-AnyDesk isafuna ingqalelo ekhethekileyo, ngakumbi ukuba umphathi uthe "Hayi!"

Ukuba uyazi ukuba yintoni ukuvimba ipakethi yenethiwekhi ngomxholo wayo kwaye wanelisekile yiyo, ke yonke into
akujongwanga yeyakho.

Ukuzama ukusuka kwelinye icala, enyanisweni indawo ithi yintoni ekufuneka ivunyelwe ukuba inkqubo isebenze; ​​ngokufanelekileyo, irekhodi ye-DNS yavalwa *.net.anydesk.com. Kodwa i-AnyDesk ayilula; ayikhathali ngokuvimba igama lesizinda.

Ngesinye isihlandlo, ndasombulula ingxaki yokuthintela "Nayiphi na indawo yokulawula", eyafika kuthi kunye nesofthiwe ethandabuzekayo, kwaye yasombululwa ngokuvala nje ii-IP ezimbalwa (ndayixhasa i-antivirus). Ingxaki ngeAnyDesk, emva kokuba ndiqokelele ngaphezu kweshumi elinesibini leedilesi ze-IP, uye wandiqinisa mka kumsebenzi wezandla oqhelekileyo.

Kwaye kwafunyaniswa ukuba kwi "C: ProgramDataAnyDesk" kukho inani leefayile ezinesethingi, njl., nakwifayile i-ad_svc.trace Iziganeko malunga noqhagamshelwano kunye nokusilela ziyaqokelelwa.

1. Ukuqwalaselwa

Njengoko sele kukhankanyiwe, ibhlokhi *.anydesk.com ayizange inike naziphi na iziphumo ekusebenzeni kwenkqubo, kwagqitywa ekubeni ihlalutye. ukuziphatha kweprogram kwiimeko ezixinzelelekileyo. I-TCPBuka evela kwi-Sysinternals ezandleni zakho kwaye uhambe!

1.1. Ingabonwa ukuba iinkqubo ezininzi ezinomdla kuthi "zixhoma", kwaye kuphela enye enxibelelana nedilesi evela ngaphandle inomdla kuthi. Amazibuko apho idibanisa khona ikhethiweyo, kwinto endiyibonileyo: 80, 443, 6568. 🙂 Ngokuqinisekileyo asikwazi ukuvimba i-80 kunye ne-443.

1.2. Emva kokuthintela idilesi nge-router, enye idilesi ikhethwa ngokuthula.

1.3. I-console yinto yethu YONKE! Siye sagqiba iPID emva koko ndaba nethamsanqa elincinci ukuba i-AnyDesk ifakwe yinkonzo, ngoko ke iPID ebesiyifuna ibiyeyona.
1.4. Simisela idilesi ye-IP yomncedisi wenkonzo kwinkqubo ye-PID.

2. Ukulungiselela

Ekubeni inkqubo yokuchonga iidilesi ze-IP ngokuqinisekileyo iya kusebenza kuphela kwi-PC yam, andinazithintelo kuncedo kunye nobuvila, ngoko ke C #.

2.1. Zonke iindlela zokuchonga idilesi ye-IP efunekayo sele isaziwa, ihlala iphunyezwa.

string pid1_;//узнаем PID сервиса AnyDesk
using (var p = new Process()) 
{p.StartInfo.FileName = "cmd.exe";
 p.StartInfo.Arguments = " /c "tasklist.exe /fi "imagename eq AnyDesk.exe" /NH /FO CsV | findstr "Services""";
 p.StartInfo.UseShellExecute = false;
 p.StartInfo.RedirectStandardOutput = true;
 p.StartInfo.CreateNoWindow = true;
 p.StartInfo.StandardOutputEncoding = Encoding.GetEncoding("CP866");
 p.Start();
 string output = p.StandardOutput.ReadToEnd();
 string[] pid1 = output.Split(',');//переводим ответ в массив
 pid1_ = pid1[1].Replace(""", "");//берем 2й элемент без кавычек
}

Ngokufanayo, sifumana inkonzo eseke uxhulumaniso, ndiya kunika kuphela umgca oyintloko

p.StartInfo.Arguments = "/c " netstat  -n -o | findstr /I " + pid1_ + " | findstr "ESTABLISHED""";

Isiphumo siya kuba:

Ukususela kumqolo, ngokufanayo kwisinyathelo sangaphambili, khupha ikholomu yesi-3 kwaye ususe yonke into emva kwe ":". Ngenxa yoko, sine-IP yethu esiyifunayo.

2.2. Ukuvalwa kwe-IP kwiWindows. Ukuba iLinux ineBlackhole kunye nee-iptables, ke indlela yokuvala idilesi ye-IP kumgca omnye, ngaphandle kokusebenzisa i-firewall, kwiWindows yaba yinto engaqhelekanga,
kodwa zizixhobo ezinjani apho...

route add наш_найденный_IP_адрес mask 255.255.255.255 10.113.113.113 if 1 -p

Iparameter engundoqo "ukuba 1" thumela indlela eya kwiLoopback (Ungabonisa ujongano olukhoyo ngokusebenzisa ushicilelo lwendlela). KWAYE KUBALULEKILE! Ngoku inkqubo kufuneka iqaliswe ngamalungelo omlawuli, ekubeni ukutshintsha indlela kufuna ukuphakama.

2.3. Ukubonisa kunye nokugcina iidilesi ze-IP ezichongiweyo ngumsebenzi omncinci kwaye awufuni ngcaciso. Ukuba ucinga ngayo, unako ukuqhubela phambili ifayile i-ad_svc.trace Nayiphi iDesk ngokwayo, kodwa andizange ndiyicinge kwangoko + mhlawumbi kukho umda kuyo.

2.4. Ukuziphatha okungaqhelekanga kwenkqubo kukuba xa "ukwenza umsebenzi" inkqubo yenkonzo Windows 10, iphinda iqalise ngokuzenzekelayo, kwi-Windows 8 iphela, ishiya kuphela inkqubo ye-console kwaye ngaphandle kokudibanisa kwakhona, ngokubanzi akukho ngqiqweni kwaye oku akuchanekanga.

Ukususa inkqubo eqhagamshele kumncedisi kukuvumela ukuba "unyanzelise" ukuqhagamshelwa kwakhona kwidilesi elandelayo. Iphunyezwa ngendlela efanayo nemiyalelo yangaphambili, ke ndiya kuyinika:

p.StartInfo.Arguments = "/c taskkill /PID " + pid1_ + " /F";

Ukongeza, qalisa inkqubo yeAnyDesk.

 //запускаем программу которая расположена по пути path_pro
if (File.Exists(path_pro)){ 
Process p1 = Process.Start(path_pro);}

2.5. Siza kujonga imeko ye-AnyDesk kanye ngomzuzu (okanye rhoqo?), kwaye ukuba ixhunyiwe, okt. uxhulumaniso ESENZIWE - vala le IP, kwaye kwakhona yonke indawo kwakhona - linda de idibanise, ibhloko kwaye ulinde.

3. Uhlaselo

Ikhowudi "yazotywa" kwaye kwagqitywa ukuba kubonwe inkqubo "+" bonisa i-IP efunyenweyo nevaliweyo, kwaye "."-phinda itshekhi ngaphandle koqhagamshelo lommelwane oluphumeleleyo kwi-AnyDesk.

→ Ikhowudi yeprojekthi

Nje ngeziphumo…

Inkqubo yasebenza kwiikhomputha ezininzi ezine-Windows OS ezahlukeneyo, kunye neenguqulelo ze-AnyDesk 5 kunye ne-6. Ngaphezulu kwe-500 yokuphindaphinda, malunga needilesi ze-80 zaqokelelwa. Kuba 2500 - 87 njalo njalo...

Ngokuhamba kwexesha, inani le-IPs ezivaliweyo lifikelele kwi-100 +.

Ikhonkco lokugqibela ifayile yokubhaliweyo needilesi: maxesha и два

Yenziwe! I-pool yeedilesi ze-IP yongezwa kwimithetho ye-router ephambili ngeskripthi kwaye i-AnyDesk ayinakukwazi ukudala uxhumano lwangaphandle.

Kukho inqaku elingaqhelekanga, ukusuka kwiilogi zokuqala kuyacaca ukuba idilesi ibandakanyeka ekudlulisweni kolwazi boot-01.net.anydesk.com. Ewe kunjalo, sivale zonke *.net.anydesk.com iinginginya njengomgaqo jikelele, kodwa ayisiyonto ingaqhelekanga leyo. Ixesha ngalinye kunye ne-ping eqhelekileyo kwiikhomputha ezahlukeneyo, eli gama lesizinda linika i-IP eyahlukileyo. Ukujonga kwiLinux:

host boot-01.net.anydesk.com

njenge DNSLookup banika idilesi ye-IP enye kuphela, kodwa le dilesi iyaguquguquka. Xa uhlalutya uxhulumaniso lwe-TCPView, sibuyiselwa iirekhodi ze-PTR zeedilesi ze-IP zohlobo udluliselo-*.net.anydesk.com.

Ngokwethiyori: kuba i-ping ngamanye amaxesha iya kumamkeli ongavalelwanga boot-01.net.anydesk.com singazifumana ezi ips kwaye sizithintele, yenza oku kuphunyezwa iskripthi esiqhelekileyo phantsi kweLinux OS, apha akukho mfuneko yokufaka nayiphi na iDesk. Uhlalutyo lubonise ukuba ezi IPs zihlala "nqumla"kunye nabo bafunyenwe kuluhlu lwethu. Mhlawumbi ngulo mkhosi kuphela apho inkqubo idibanisa khona ngaphambi kokuba iqalise "ukulungisa" ii-IPs ezaziwa. Mhlawumbi kamva ndiza kongeza inqaku kunye nenxalenye ye-2 yokukhangela umkhosi, nangona okwangoku inkqubo ngokwayo ayifaki ngaphakathi kuthungelwano lwangaphandle ukujoyina ngokubanzi.

Ndiyathemba ukuba awubonanga nto ingekho mthethweni apha ngasentla, kwaye abadali be-AnyDesk baya kuphatha izenzo zam ngendlela efana nezemidlalo.

umthombo: www.habr.com