X11 (6000+)

• X11 Enumeration
  • List open windows
  • Authentication Method
    • Xauth
    • Xhost
• X11 Exploitation
  • xwd
    • xwd -display 192.168.0.1:0 -root -out 192.168.0.1.xpm
  • Keystrokes
    • Received
    • Transmitted
  • Screenshots
  • xhost +
• Examine Configuration Files
  • /etc/Xn.hosts
  • /usr/lib/X11/xdm
    • Search through all files for the command “xhost +” or “/usr/bin/X11/xhost +”
  • /usr/lib/X11/xdm/xsession
  • /usr/lib/X11/xdm/xsession-remote
  • /usr/lib/X11/xdm/xsession.0
  • /usr/lib/X11/xdm/xdm-config
    • DisplayManager*authorize:on