Penetration Testing mailing list archives

RE: Finding PC Anywhere on Client Machines


From: "Michael Katz" <mike () responsible com>
Date: Thu, 12 Jul 2001 13:20:18 -0700

On Thursday, July 12, 2001 6:50 AM, Terry Dunlap wrote:

Short of using ISS or war dialing, does anyone know of other
tools/methods to locate installed versions of PC Anywhere on client
machines?

Terry,

Remotely finding machines on which pcAnywhere has been installed but is not running is difficult. On unsecured Windows 
NT machines, you may be able to enumerate services (including stopped services) to find some that have pcAnywhere 
installed.  Cerberus Internet Scanner will remotely enumerate services on unsecured Windows NT machines.

Remotely finding machines on which pcAnywhere is running should be relatively simple.  Some suggestions:

        - Load up pcAnywhere on a machine connected to the network on which you want to look for machines.  Then select 
Remote Control and Network - this will query the network for machines running pcAnywhere
        - Use your favorite port scanner to check for telltale pcAnywhere ports: TCP:22, 5631, 5632, 65301 and UDP:22, 
5632 for version 8, for example.

Hope that helps.

Michael Katz
mike () responsible com
Responsible Solutions, Ltd.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: