RE: Windows Independant GUI

For the record, Remote Desktop Connection only spawns another "virtual
desktop" on a system running Terminal Services (Server 2003 and, I believe,
Server 2000). Windows XP runs Terminal Services Lite and, as such, Remote
Desktop Connection used on a Windows XP box will kick off the user currently
logged in. WinConnect XP Server is an option to get multiple RDP sessions,
and I'm sure others know of better ways (or, at least, I hope so), as
WinConnect is not cheap.

Isaac Van Name

-----Original Message-----
From: Marios A. Spinthiras [mailto:mario@xxxxxxxxxxxxx]
Sent: Tuesday, September 05, 2006 5:02 AM
To: pen-test@xxxxxxxxxxxxxxxxx
Subject: Re: Windows Independant GUI

Remote Desktop Connection spawns another "virutal desktop" under the
account credentials you specify. This is unlike VNC which simply
connects to the active display of the user currently logged on. If VNC
is running as a system service it still means that you will be
connecting to the Administrator account. If the station is locked (ALT
CTRL DEL) then you will be looking at the same screen that the user
looks at when he looks at the monitor of the workstation. Disregarding
that simply for aesthetic purposes , what you need is a RDP like connection.

Regards,
Mario A. Spinthiras

One2@xxxxxxxxxx wrote:
Hey All,

After compromising Windows workstations I am able to gain a remote GUI via
either Terminal Services, VNC, GetScreen, etc.

However, this remote access gives me access to the user's GUI, which
limits me to using the GUI when they seem to have left for lunch. ;o)

Does anyone know of any way that I can gain an independant GUI so that I
can use and install GUI software to continue the attack, without having to
worry about whether the user is using their GUI?

All ideas are welcome.

Thanks,
One2


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------




------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------

Relevant Pages

  • Re: Terminal Services Client 6.0 Authentication
    ... use the MCE system to connect to the Pro system via RDP. ... and then go right to a "Log On to Windows" dialog. ... I always get a "Remote Desktop Connection" dialog ... on the "Remote Desktop Connection" ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Terminal Services Client 6.0 Authentication
    ... try and use the "Do not use authentication" option in the Advanced ... and then go right to a "Log On to Windows" dialog. ... I always get a "Remote Desktop Connection" dialog ... on the "Remote Desktop Connection" ...
    (microsoft.public.windowsxp.work_remotely)
  • Terminal services - Remote admin
    ... to run a "Remote Desktop Connection" from a ... Windows XP machine connecting to a W2K server, ...
    (microsoft.public.win2000.general)
  • Re: ter
    ... remote desktop connection is terminal services. ... escribió en el mensaje ... > how to start terminal services in windows xp ...
    (microsoft.public.windows.terminal_services)
  • Re: cant log on to server
    ... -- Terminal Services - Remote Administration mode ... Win2003\ Remote Desktop Connection used to be Terminal Services - Remote ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)