Possible to see a remotesession

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Are there any known tools to spy on a remotedesktop session? I suppose you
can log sent keystrokes, but is it possible for a thirdpart to actually see
the transferred graphic or somehow analyse it?

 

[Sparda]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

"" wrote:
> Are there any known tools to spy on a remotedesktop session? I
> suppose you
> can log sent keystrokes, but is it possible for a thirdpart to
> actually see
> the transferred graphic or somehow analyse it?

Yes, but you would have to have some way of intercepting the packets,
and then a program to interperate the packets. If your just wanting to
log keystocks (asuming no encyption is used) you could just use a
network analysis tool (such as Ethereal) to log all packets and
"snoop" around them for the keystroks sent.

Ethereal: http://www.ethereal.com/

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Work-Remotely-remotesession-ftopict421097.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1407658

 

[steven]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Sparda wrote:
> "" wrote:
> > Are there any known tools to spy on a remotedesktop session? I
> > suppose you
> > can log sent keystrokes, but is it possible for a thirdpart to
> > actually see
> > the transferred graphic or somehow analyse it?
>
> Yes, but you would have to have some way of intercepting the packets,
> and then a program to interperate the packets. If your just wanting to
> log keystocks (asuming no encyption is used) you could just use a
> network analysis tool (such as Ethereal) to log all packets and
> "snoop" around them for the keystroks sent.
>
> Ethereal: http://www.ethereal.com/
>
In the Group Policy settings for Terminal services there's an option
that looks like it'll allow you to "view session without user's
permission" I don't know if this is what it's for, it doesn't seem to
work for me...
Steven

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

But--encryption IS used, by default, 128 bit--from before the login
credentials are exchanged.

--

"Sparda" <UseLinkToEmail@WindowsForumz.com> wrote in message
news:3_1407658_27876f0b0281c3f3141f4b3fd04ca221@windowsforumz.com...
> "" wrote:
> > Are there any known tools to spy on a remotedesktop session? I
> > suppose you
> > can log sent keystrokes, but is it possible for a thirdpart to
> > actually see
> > the transferred graphic or somehow analyse it?
>
> Yes, but you would have to have some way of intercepting the packets,
> and then a program to interperate the packets. If your just wanting to
> log keystocks (asuming no encyption is used) you could just use a
> network analysis tool (such as Ethereal) to log all packets and
> "snoop" around them for the keystroks sent.
>
> Ethereal: http://www.ethereal.com/
>
> --
> Posted using the http://www.windowsforumz.com interface, at author's
> request
> Articles individually checked for conformance to usenet standards
> Topic URL:
> http://www.windowsforumz.com/Work-Remotely-remotesession-ftopict421097.html
> Visit Topic URL to contact author (reg. req'd). Report abuse:
> http://www.windowsforumz.com/eform.php?p=1407658

 

[Sparda]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

"" wrote:
> But--encryption IS used, by default, 128 bit--from before the
> login
> credentials are exchanged.
>
> --
>
> "Sparda" <UseLinkToEmail@WindowsForumz.com> wrote in message
> news:3_1407658_27876f0b0281c3f3141f4b3fd04ca221@windowsforumz.com...
> > "" wrote:
> > > Are there any known tools to spy on a remotedesktop
> session? I
> > > suppose you
> > > can log sent keystrokes, but is it possible for a
> thirdpart to
> > > actually see
> > > the transferred graphic or somehow analyse it?
> >
> > Yes, but you would have to have some way of intercepting the
> packets,
> > and then a program to interperate the packets. If your just
> wanting to
> > log keystocks (asuming no encyption is used) you could just
> use a
> > network analysis tool (such as Ethereal) to log all packets
> and
> > "snoop" around them for the keystroks sent.
> >
> > Ethereal: http://www.ethereal.com/
> >
> > --
> > Posted using the http://www.windowsforumz.com interface, at author's
> > request
> > Articles individually checked for conformance to usenet
> standards
> > Topic URL:
> > http://www.windowsforumz.com/Work-Remotely-remotesession-ftopict421097.html
> > Visit Topic URL to contact author (reg. req'd). Report
> abuse:
> > http://www.windowsforumz.com/eform.php?p=1407658

If encyption is used, your going to have a hard time.