Citrix and Terminal Services

Presented at DEF CON 10 (2002), Aug. 3, 2002, 3 p.m. (50 minutes)

Citrix and Terminal Services are becoming very popular. Ian Vitek will speak about: Scanning and finding Terminal Services and Published Applications. This will include statistics of open and vulnerable servers. Connection to Published Applications. This can be harder than you think. Most of the servers have Published Applications. You can�t just see them. Breaking out from the given environment and elevation of rights. Demonstration. The way administrators set up their Citrix servers every so often the Citrix client can�t enumerate Published Applications or connect to them from Internet. Tools for enumerating and connecting to Published Applications will be released.

Presenters:

• Ian Vitek - iXsecurity
  Ian Vitek has been working for iXsecurity in Sweden as a Penetration Tester for seven years. He is more a networking guy then doing assembly stuff. He is the writer of macof and briiis.

Links:

• https://defcon.org/html/defcon-10/defcon-10-speakers.html#ianvitek
• https://infocon.org/cons/DEF CON/DEF CON 10/DEF CON 10 video/DEF CON 10 - Ian Vitek - Terminal Servers.mp4
• https://www.youtube.com/watch?v=PNYBbDCOutc

Similar Presentations:

• TROOPERS17 (2017) / Holy crap I need to pentest SAP from Citrix
• DEF CON 12 (2004) / Exploring Terminal Services, The Last 12 Month of Research. Or, The Evil Admin And His Tools