(cmd) python alpc\advanced_alpc.py server pid = 2300 [SERV] PORT <\RPC Control\PythonForWindowsPORT_2> CREATED Client pid = 14848 [CLIENT] == Connecting to port == [SERV] == Message received == * ALPC connection request: [CLIENT] Connected with response: [CLIENT] == Sending a message == * Sending Message [SERV] == Message received == * ALPC request: * view_is_valid * security_is_valid * handle_is_valid * context_is_valid * message context attribute: - CTX.PortContext -> 0x11223344 - CTX.MessageContext -> None - CTX.Sequence -> 0x1L - CTX.MessageId -> 0x0L - CTX.CallbackId -> 0x0L * message token attribute: - TOKEN.TokenId -> 0x4101ef8eL - TOKEN.AuthenticationId -> 0x54177L - TOKEN.ModifiedId -> 0x4077ab89L [CLIENT] Server response: [CLIENT] RESP Message Valid ATTRS = [ALPC_MESSAGE_CONTEXT_ATTRIBUTE(0x20000000L)] [Client] == Sending a message with a handle == [SERV] == Message received == * ALPC request: * view_is_valid * security_is_valid * handle_is_valid * message handle attribute: - HANDLE.Flags -> 0x0L - HANDLE.Handle -> 0x2cc - HANDLE.ObjectType -> 0x1L - HANDLE.DesiredAccess -> 0x13019fL - File: ', mode 'r' at 0x049ECA18> - content: * context_is_valid * message context attribute: - CTX.PortContext -> 0x11223344 - CTX.MessageContext -> None - CTX.Sequence -> 0x2L - CTX.MessageId -> 0x0L - CTX.CallbackId -> 0x0L * message token attribute: - TOKEN.TokenId -> 0x4101ef8eL - TOKEN.AuthenticationId -> 0x54177L - TOKEN.ModifiedId -> 0x4077ab89L [Client] == Sending a message with a view == [SERV] == Message received == * ALPC request: * view_is_valid * message view attribute: - VIEW.Flags -> 0x0L - VIEW.SectionHandle -> None - VIEW.ViewBase -> 0x4780000 - VIEW.ViewSize -> 0x4000 * Reading view content: * security_is_valid * handle_is_valid * context_is_valid * message context attribute: - CTX.PortContext -> 0x11223344 - CTX.MessageContext -> None - CTX.Sequence -> 0x3L - CTX.MessageId -> 0x0L - CTX.CallbackId -> 0x0L * message token attribute: - TOKEN.TokenId -> 0x4101ef8eL - TOKEN.AuthenticationId -> 0x54177L - TOKEN.ModifiedId -> 0x4077ab89L [SERV] == Message received == Unexpected message type <12> [SERV] == Message received == Unexpected message type <5> [SERV] == Message received == Unexpected message type <12> [SERV] == Message received == Unexpected message type <12> BYE