Full Disclosure mailing list archives
Re: Possible RDP vulnerability
From: "Mr. Hinky Dink" <dink () mrhinkydink com>
Date: Sat, 27 Mar 2010 11:51:26 -0400
As far as RDP is concerned, it's much simpler (and more fun!) to host an Evil RDP Server than it is to hack into one. There is no end to the shenanigans you can create or the havoc you can wreak, if you're into that kind of thing (just sayin'... as a Big Time Security Professionalâ„¢, I'm not). For instance, this low quailty, seldom seen, crappy video (barely) shows how you can get a virus/Trojan/worm/etc. if you are insane enough to attach your local drives to an untrusted RDP server (the popup at the end is the AV going off). http://www.youtube.com/watch?v=UwhqJSmYm_4 EXTRA CREDIT: devise a Group Policy that will prevent users from attaching their local drives to a remote RDP server. ----- Original Message ----- From: wicked clown To: Thor (Hammer of God) Cc: Full-Disclosure () lists grok org uk Sent: Saturday, March 27, 2010 7:39 AM Subject: Re: [Full-disclosure] Possible RDP vulnerability I think we are two different pages :) what I was trying to show if you have a group policy that will only run a certain applications for example notepad.exe, the user is unable to access my computer, run or the start button or any other application. There would be a shortcut on the desktop for just notepad.exe for the user to execute. / _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Possible RDP vulnerability, (continued)
- Re: Possible RDP vulnerability wicked clown (Mar 26)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 26)
- Re: Possible RDP vulnerability wicked clown (Mar 26)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 26)
- Re: Possible RDP vulnerability wicked clown (Mar 27)
- Re: Possible RDP vulnerability Dan Kaminsky (Mar 27)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)
- Re: Possible RDP vulnerability Dan Kaminsky (Mar 27)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)
- Re: Possible RDP vulnerability wicked clown (Mar 26)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)
- Re: Possible RDP vulnerability Mr. Hinky Dink (Mar 27)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)
- Re: Possible RDP vulnerability Mr. Hinky Dink (Mar 27)
- Re: Possible RDP vulnerability Benji (Mar 27)
- Re: Possible RDP vulnerability Thor (Hammer of God) (Mar 27)