full-disclosure - Some VNC doubts : access server behind TCP/IPproxy or gateways

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAA21hmoMYoHkW7Rdov+thcNQEAAAAA@online.gateway.strangled.net>
Date: Wed Jul  6 06:19:10 2005
From: aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh)
Subject: Some VNC doubts : access server behind
	TCP/IPproxy or gateways

>
> VNC does support 'reverse shells'. Look in the manual for your
> particular version.

Yes I am looking and testing this out

> You would need to open one or more ports on your company's
> firewall, but
> that isn't too big a problem, is it? Just tunnel it over something
> reasonably safe, and tell the helpdesk not to use
> 'priviliged' machines
> for incoming calls...

The holes are not in the company's firewalls but in the firewalls of the
Road warriors' computers mainly winxp sp2, firewall enabled so that nothing
Outside can connect to that machine and I would rather keep it that way!



________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)