LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 11-12-2008, 12:21 PM   #1
ceantuco
Member
 
Registered: Mar 2008
Location: New Jersey
Distribution: CentOS, Debian, Kali
Posts: 577

Rep: Reputation: 37
Question VNC Password


Hi guys!
first let me clarify that I'm not trying to hack someone's computer or anything like that but:

I work for a company as Lan Admin, I use VNC to connect to the users' computers and resolve issues quickly, well one of the users has brought to my attention that someone is connecting to his/her PC, problem is that I'm the only one that knows the VNC password. I'm running Wireshark scanning VNC ports and waiting for that sucker to connect however I would like to see what password that person is using to connect. ( I wonder if my VNC password has been compromised)I tested and there is a string that says Authentication response from Client but I can't decode what the password is. (this was a test I did) If you guys can't help me it is fine but like I said I'm not trying to crack anything just catch whoever is doing it!
thanks for your help!
 
Old 11-12-2008, 03:51 PM   #2
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,117
Blog Entries: 2

Rep: Reputation: 113Reputation: 113
why not just assume yours has been compromised and change the password? If they are gaining access then it doesn't really matter what password they are using, they either have yours or a collision of yours, though I believe vnc does just a straight des crypt with a set key so collision is unlikely. If they have access to the server other than vnc they might be able to access the vnc password file, if that's the case it doesn't matter what you change it to they'll still have access since they'll just go decrypt then new password when you change it.
 
Old 11-12-2008, 05:14 PM   #3
ceantuco
Member
 
Registered: Mar 2008
Location: New Jersey
Distribution: CentOS, Debian, Kali
Posts: 577

Original Poster
Rep: Reputation: 37
the thing is that I think the person that is connecting to that system is someone who works here!!! so getting this person's IP and a proof that he/she is using my password would be really good.
what do you think?
 
Old 11-13-2008, 11:19 AM   #4
estabroo
Senior Member
 
Registered: Jun 2008
Distribution: debian, ubuntu, sidux
Posts: 1,117
Blog Entries: 2

Rep: Reputation: 113Reputation: 113
Do several captures of your connecting to the vnc server and I'll bet you'll see that the auth string it sends is the same every time. If that is the case then when that person logs in you can compare it with yours. I think its kind of a moot point though since I believe vnc servers only support one password (though they might have a different one for watchers only), so all you need to do is record the ip its coming from and you have your answer.
 
Old 11-13-2008, 11:42 AM   #5
ceantuco
Member
 
Registered: Mar 2008
Location: New Jersey
Distribution: CentOS, Debian, Kali
Posts: 577

Original Poster
Rep: Reputation: 37
Thanks for your help! I will def do that! :=)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
no password configured for vnc auth sidra Red Hat 4 03-25-2008 08:57 PM
VNC works, but doesn't ask for password drokmed SUSE / openSUSE 5 11-10-2006 07:42 PM
VNC password natm Linux - Software 3 07-19-2005 12:04 PM
vnc server password problem Rizzter Linux - Software 1 12-30-2004 01:44 AM
Tight VNC password? Maver Linux - Software 2 08-29-2004 06:11 PM


All times are GMT -5. The time now is 12:50 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration