full-disclosure - Some VNC doubts : access server behind TCP/IP proxy or gateways

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Jul  5 06:41:51 2005
From: xillwillx at gmail.com (Ill will)
Subject: Some VNC doubts : access server behind TCP/IP
	proxy or gateways

tcpredir,fpipe,bouncer

On 7/5/05, Aditya Deshmukh <aditya.deshmukh@...ine.gateway.strangled.net> 
wrote:
> 
> Hi List,
> 
> I have a very peculiar problem about accessing VNC server behind gateways
> and proxy server...
> 
> Here is the background info...
> 
> I have a client who has pretty big vnc installation base mostly windows 
> but
> Linux and Solaris also includes.
> 
> Most of the Road Warriors have windows with vnc and ssh installed on them 
> (
> mostly winxp sp2 )
> 
> VNC is used to remote admin or support for some of the road warriors. But
> most of the times when the VNC server is behind a gateway like this it 
> wont
> connect.
> 
> [ Internet ] -- [ Gateway ] --- [ Lan ]
> 
> The work about is to use the UltraVNC relay service, but if you don't have
> any control over the gateway this becomes impossible to operate. And I 
> hate
> to open ports in the firewalls of the road warriors' computers.
> 
> Is there a way something like reverse shell that allows someone to connect
> to a VNC server, behind gateway and through firewalls without opening any
> holes in it or a tcp/ip proxy that is proxy that does not allow 
> connections
> from the internet ?
> 
> Basically, The user initiates the connection and the helpdesk can use the
> same socket to the laptop for connection over VNC ( vnc encryption and
> compression have already been taken care of, and only one socket is needed
> for all this- for a firewall I would require only one hole )
> 
> 
> Any help would be appreciated - aditya
> 
> 
> 
> 
> 
> ________________________________________________________________________
> Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com<http://www.mailtraq.com>
> )
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 



-- 
- illwill
http://illmob.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050705/05845b63/attachment.html