• X11 Enumeration
    • List open windows
    • Authentication Method
      • Xauth
      • Xhost
  • X11 Exploitation
    • xwd
      • xwd -display 192.168.0.1:0 -root -out 192.168.0.1.xpm
    • Keystrokes
      • Received
      • Transmitted
    • Screenshots
    • xhost +
  • Examine Configuration Files
    • /etc/Xn.hosts
    • /usr/lib/X11/xdm
      • Search through all files for the command “xhost +” or “/usr/bin/X11/xhost +”
    • /usr/lib/X11/xdm/xsession
    • /usr/lib/X11/xdm/xsession-remote
    • /usr/lib/X11/xdm/xsession.0
    • /usr/lib/X11/xdm/xdm-config
      • DisplayManager*authorize:on