Loren Booda
- 3,108
- 4
As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?
light_bulb said:not in realtime but with some latency, one of the vnc's would do the job.
Loren Booda said:As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?
Loren Booda said:As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?
Loren Booda said:Somewhere in my office I saw a screen with "ghost" cursor movement and typing which imitated those of a remote unit. Now I find it scary that someone would relish my multiple typos and stunted hunt-and-pecking.
Loren Booda said:As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?
One of the first DLL injection payloads developed was a customized VNC server. This server was written by Matt Miller and based on the RealVNC source code. Additional modifications were made to allow the server to work with exploited, non-interactive network services. This payload allows you to immediately access the desktop of an exploited system using almost any Win32 exploit. The DLL is loaded into the remote process using any of the staged loader systems, started up as a new thread in the exploited process, and the listens for VNC client requests on the same socket used to load the DLL. The Framework simply listens on a local socket for a VNC client and proxies data across the payload connection to the server.
The VNC server will attempt to obtain full access to the current interactive desktop. If the first attempt fails, it will call RevertToSelf() and then try the attempt again. If it still fails to obtain full access to this desktop, it will fall back to a read-only mode. In read-only mode, the Framework user can view the contents of the desktop, but not interact with it. If full access was obtained, the VNC server will spawn a command shell on the desktop with the privileges of the exploited service. This is useful in situations where an unprivileged user is on the interactive desktop, but the exploited service is running with System privileges.
If you have a CRT (TV or Computer) then the claim is yes.
It is said to be possible to remotely read display EM emissions.
Loren Booda said:As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?
By shoulder surfing..Loren Booda said:As I use my new cable Internet service, can an outsider possibly scrutinize my screen realtime?