full-disclosure - Re: VNC viewers: Clipboard of host automatically sent to remote machine

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1327521154.7531.YahooMailClassic@web113815.mail.gq1.yahoo.com>
Date: Wed, 25 Jan 2012 11:52:34 -0800 (PST)
From: Carlos Pantelides <carlos_pantelides@...oo.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: VNC viewers: Clipboard of host automatically
	sent to remote machine

> Those who try to manage potentially malicious servers do so over IP KVM,
 in which the foreign server basically gets only inbound Keyboard and 
Mouse and outbound uncompressed pixels.

Feature or bug, vnc or ip kvm, the same behavior has a virtual box virtualized machine with shared clipboard. You can choose disabled, direction and bidirectional (by default)

Something to keep in mind, at least the beginners like me.

Just run in the guest and see your clipboard, sure there are more elegant ways of doing the same. (tested linux in linux with virtual box and linux in mac with vmware)

while true; do
  xsel -p
  echo
  xsel -s
  echo
  xsel -b
  echo
done

Carlos Pantelides

-----------------

http://seguridad-agile.blogspot.com/

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/