From: Marios A. Spinthiras (mario@netway.com.cy)
Date: Tue Sep 05 2006 - 06:01:42 EDT
Remote Desktop Connection spawns another "virutal desktop" under the
account credentials you specify. This is unlike VNC which simply
connects to the active display of the user currently logged on. If VNC
is running as a system service it still means that you will be
connecting to the Administrator account. If the station is locked (ALT
CTRL DEL) then you will be looking at the same screen that the user
looks at when he looks at the monitor of the workstation. Disregarding
that simply for aesthetic purposes , what you need is a RDP like connection.
Regards,
Mario A. Spinthiras
One2@onetwo.com wrote:
> Hey All,
>
> After compromising Windows workstations I am able to gain a remote GUI via either Terminal Services, VNC, GetScreen, etc.
>
> However, this remote access gives me access to the user's GUI, which limits me to using the GUI when they seem to have left for lunch. ;o)
>
> Does anyone know of any way that I can gain an independant GUI so that I can use and install GUI software to continue the attack, without having to worry about whether the user is using their GUI?
>
> All ideas are welcome.
>
> Thanks,
> One2
>
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php
> ------------------------------------------------------------------------
>
>
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:56:54 EDT