VNC payload problems

[hdm at metasploit.com (H D Moore)]

I see this once in a while -- usually its caused by one of these two 
issues:

1) Security software on the target is breaking causing VNC to crash
2) Some other software is killing the exploit process, with VNC in it

Common case is using the "psexec" exploit with the VNC payload, the 
service control manager will kill VNC after a few seconds. One way to 
track whats going on is to attach a debugger to the target process and 
see what happens when the connection is closed.

-HD

On Tuesday 25 September 2007 15:29, Andres Riancho wrote:
> ?? Neither bind and reverse VNC are working. I think that the problem
> is with the TCP relay... any ideas on why this ain't working? How can I
> debug the multistage payload (the .exe on the remote server) ?