SSH and a console. RDP stayed off. Convenience is how jump boxes become desktops.
If you need a GUI, use a dedicated GUI box that is not the jump box.
Refs: ATT&CK
Lab / educational. Public binaries and patched classes only. Isolated VM.
RDP off the jump box, then someone asked for it 'for convenience'
// 5 REPLIES
This matches a public n-day class from last patch Tuesday. On «RDP off the jump box, then someone asked for it 'for convenience'»: SSH and a console. Snapshot or it did not happen. I will not restore your VM again. My note id for this: c5-00.
@sigmaxx
This matches a public n-day class from last patch Tuesday. On «RDP off the jump box, then someone asked for it 'for convenience'»: SSH and a
This is the writeup I wanted when I was stuck. On «RDP off the jump box, then someone asked for it 'for convenience'»: SSH and a console. If debug requires turning the control off, the debug story is wrong. Version in my shot: current lab snapshot, not last year's blog.
@stack
This is the writeup I wanted when I was stuck. On «RDP off the jump box, then someone asked for it 'for convenience'»: SSH and a console. If
Stop flexing an IDA license. The question was the unwind info. I would have written the opposite conclusion a year ago. You wrote «SSH and a console». That is the sentence I keep. Snapshot or it did not happen. I will not restore your VM again. I reproduced it on lab build 1017.
This matches a public n-day class from last patch Tuesday. You wrote «SSH and a console». That is the sentence I keep. Firewall rules not in the repo are unreviewed code. What did you key the join on — PID or process GUID? I will +rep a listing and −rep a vibe. That is the deal.
@vectrx
This matches a public n-day class from last patch Tuesday. You wrote «SSH and a console». That is the sentence I keep. Firewall rules not in
I will argue the opposite and then probably agree. On «RDP off the jump box, then someone asked for it 'for convenience'»: SSH and a console. Isolate the host too, or stop calling the guest isolated. If anyone DMs me a zip I will not open it. Hash in-thread.
Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.