The Ethical Hacker Network - Looking for an old exploit

Latest Additions

Who's Online

jimbob

Guest

« on: June 27, 2007, 10:07:55 AM »

Hi all,
I've been trying to track down a copy of xscan.c, a little program that connects to an Xwindow server and log keystrokes if someone has been silly enough to run xhost +. Does anyone have a copy or an equivalent tool?

Regards,
Jim


	Logged

Craig

EH-Net Columnist
Jr. Member

Offline

Posts: 69

Re: Looking for an old exploit - xscan.c

« Reply #1 on: June 27, 2007, 12:50:20 PM »

This looks like what you're talking about:

http://packetstorm.foofus.com/Exploit_Code_Archive/xscan.tar.gz


	Logged

http://www.sourcesec.com

jimbob

Guest

Re: Looking for an old exploit - xscan.c

« Reply #2 on: June 28, 2007, 08:34:04 AM »

Nice one! The the days of way back this was a single file named xscan.c. No wonder my searches didn't throw up anything!

And remember kids, always tunnel your X traffic through ssh ;-)

Cheers,
Jim


	Logged

jimbob

Guest

Re: Looking for an old exploit - xscan.c

« Reply #3 on: June 29, 2007, 04:05:23 AM »

Just a quick note to anyone using this app. I've compiled and run this successfully under Cygwin but beware, the output filename for this tool is KEYLOG[hostname]:0.0

Anyone spot the issue with this? If you tun this under cygwin you'll get a file name KEYLOG[hostname] with a ADS stream named 0.0 instead of the intended filename. xscan inadvertently hides the output of the keylogger, shame about the woefully obvious file name ;-)

The reason I dug this tool up again is that I've seen some resurgence in vulnerable X servers, particularly since Cygwin has gained more popularity. Anyone else have any similar experience?

Jim