Re: Windows Independant GUI



Remote Desktop Connection spawns another "virutal desktop" under the account credentials you specify. This is unlike VNC which simply connects to the active display of the user currently logged on. If VNC is running as a system service it still means that you will be connecting to the Administrator account. If the station is locked (ALT CTRL DEL) then you will be looking at the same screen that the user looks at when he looks at the monitor of the workstation. Disregarding that simply for aesthetic purposes , what you need is a RDP like connection.

Regards,
Mario A. Spinthiras

One2@xxxxxxxxxx wrote:
Hey All,

After compromising Windows workstations I am able to gain a remote GUI via either Terminal Services, VNC, GetScreen, etc.

However, this remote access gives me access to the user's GUI, which limits me to using the GUI when they seem to have left for lunch. ;o)

Does anyone know of any way that I can gain an independant GUI so that I can use and install GUI software to continue the attack, without having to worry about whether the user is using their GUI?

All ideas are welcome.

Thanks,
One2


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



Relevant Pages

  • Re: Remote Desktop
    ... Just so everyone is clear, the built in remote desktop in Dapper, as far ... as I can tell is VNC (VNC allows remote connections to the mashine, ... with the slowness and I use an SSH tunnel the VNC connection to VNC. ...
    (Ubuntu)
  • Re: remote matlab via ssh mac-to-mac with gui
    ... according to apple, one can run remote aqua applications, but code ... and start up a vnc viewer (e.g. Chicken of the VNC or apple's remote ... desktop) and connect to the mac2 vnc server. ... added benefit that you can break the connection between mac1 and mac2 ...
    (comp.soft-sys.matlab)
  • Remote through Netmeeting
    ... The "Remote Disktop Connection" does not allow you to do ... Netmeeting seems to work fine, ... >Desktop Connection" which is your most secure connection! ... >>using VNC, but believe that netmeeting is more secure. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Cant connect via VNC from work to home
    ... >> Some remote control programs allow people to move files through the ... >> connection, while VNC doesn't allow files specifically, there is no ... VNC not RDP is the topic. ...
    (comp.security.firewalls)
  • Re: ssh -x gui
    ... The man of ssh say's I should use "ssh -Y", ... if your looking to view someone elses desktop, you want to use remote ... You can run the full GUI over SSH. ... It might be better, depending on your connection speed, to use something ...
    (Ubuntu)

Quantcast