Quote:
1) What does the service run as? SYSTEM?
Yes, but the service only runs while you're connected to it. As soon as you disconnect, it is automatically stopped, removed and its files and registry entries are deleted.
Quote:
2) I see here that it requires no password, but does it have a place where you can configure one should you want to?
No. The reason it requires no password is that it uses a trusted connection in a Windows NT/2k domain. You still need administrator rights.
Quote:
3) I assume it is a cleartext session. Can you confirm?
It internally uses VNC, so yes.
Quote:
4) What port does it listen on and is it configurable?
TCP 5900. Again, it only listens while it's running, as soon as you disconnect, it stops.
Quote:
A listening service that doesn't do authorization or authentication is a hax0r's wet dream (and my nightmare).
It doesn't listen. It only uses stuff that is enabled by default in Windows. It does not install anything permanently into the server.
While it is listening, it still requires authentication. It sets a random temporary password.
Quote:
As always Slart, great effort.
Thanks
Slarty