SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Remote Desktop Security

wayde avatar
wayde
23 diapositives · 504 Views · Aug 06, 2014

Remote Desktop Security. Raghav Chawla, Jon Ussery Group 20. What is Remote Desktop?. Remote administration software Ran on foreign host’s server Displayed locally. Motivation. Very popular Increasingly mobile society Need to access home/work PCs Extremely vulnerable

Remote Desktop Security - slide 1
01 / 23Remote Desktop Security
1 / 17

Télécharger la présentation

Remote Desktop Security
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Remote Desktop Security Raghav Chawla, Jon Ussery Group 20

  2. What is Remote Desktop? • Remote administration software • Ran on foreign host’s server • Displayed locally

  3. Motivation • Very popular • Increasingly mobile society • Need to access home/work PCs • Extremely vulnerable • Easy to exploit these vulnerabilities • Complete access

  4. How Does it Work? • For Microsoft services: • Terminal services allow user to access data and applications on a remote computer • Different than appstreaming, as computations are processed on remote pc

  5. History (Microsoft software) • Terminal services were introduced in Windows NT 4.0 • Vastly improved in Windows 2000 • Vista has new developments as well • Clipboard • Audio

  6. Differences • In client versions of Windows OS, only one user can be logged in at a time • In the server version, concurrent sessions are allowed • Terminal Services provide for remote software access

  7. In Action • Runs on port 3389 • Includes ActiveX control • Winlogon.exe authenticates user • Keyboard and mouse inputs are transmitted via TCP connection • Virtual Channels allow other devices to work (such as printers, audio, etc.)

  8. Some Software Distributions • Microsoft Remote Desktop Connection • RealVNC • TightVNC • Apple Remote Desktop (for Apple pc’s) • GoToMyPC

  9. Software Comparison

  10. The Lab • Hacking into remote desktop • Remotely Enabling remote desktop • Multiuser remote desktop hack • Hacking through a firewall • Security measures

  11. Hacking into Remote Desktop • Transferred WinVNC files on remote pc • Used RegINI.exe to load data (password, socket connections) into registry • Installed VNC through command prompt

  12. Enable Remote Desktop via Network • Use Regedit to connect to the Network registry

  13. Find client machine on network • After a few registry edits, remote desktop functionality will be available

  14. Multiuser Desktop Hack • Boot Windows in safe mode • Changed terminal services settings • Replaced termsrv.dll files with alternate

  15. Multiuser Hack (cont.) • Changed some registry settings • Finally, tweak Terminal Services settings

  16. Hacking Through A Firewall • Useful if port 3389 is blocked • Used Putty to setup a tunnel for accessing RDC Server

  17. Security Measures • Limit users who can log on remotely

  18. Security Measures (cont.) • Set an account lockout policy

  19. Security Measures (cont.) • Require passwords and at least 128-bit encryption • Run - %SystemRoot%\system32\gpedit.msc /s

  20. Security Measures (cont.) • Change the RDP port number • Edit registry as follows: • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

  21. Other Tools

  22. Loopback!

  23. Any Questions?