System being Hacked

[L1Technician]

---

Ga gamit pod me ug VNC sa company and dili man basta-basta maka remote kung ang firewall is running specially corporate firewall kay company man kaha na inyoha. The only remote software nga mo bypass ug firewall maski corporate firewall pa na is TeamViewer pero daghan pa siguro uban nga software.

Kung naay programs nga dili mo run ug tarong kung naka enabled ang firewall then forward ang port para sa specific nga program or software.

Dili man siguro i gamble ninyo ang usa ka program nga dili mo run sa security sa inyong company.

[L1Technician]

Check this link bro How to setup ssh to tunnel VNC traffic throught the Internet

[ChaosOrb]

first off a corporate network being online on the Internet without a firewall is suicide.

Better use a software that allows secure connection for full remote operations, try TeamViewer. That what I always use if I troubleshoot remote computers/workstations. It allows full access to workstation, you can interact with the workstation through chat and etc, you can transfer files.

You can also try other softwares of the same nature, but I recommend TeamViewer.

[boyguapo]

bro butang jug ka ug firewall, try Welcome to Express 3.0! - SmoothWall.org mao sad na akong gamit, sayon raman e remote bro.... basta kahibalo lang ka kong unsa nga port imong gamiton.

[sleepydeepeyed]

unsa diay imong server bro? if windows server ,gamita daw ang terminal server remote desktop..if daghan ka ug satellite offices..try setup site-to-site VPN connection(www.ipcop.org+zerina.de ..safe na imo VNC ,pwd dili na nimo iexpose sa public kay naa naman ka private virtual connections.

[DigiBoy]

can someone expaund more on the port forwarding for vnc?

[L1Technician]

Unsa may model ug brand sa imo router?

[DigiBoy]

linksys wrt54g.. im familiar with port forwarding.just wana know whats the port and how it actually works.

[sleepydeepeyed]

pls read this bro:
PC Tech Solutions: How Port Forwarding Works

[harryperales]

bro mas sayon pag-tapang nimo if you could give detail on the set-up of the compromised unit. Like
OS and softwares installed.
Also, advisable gyud nga lockdown nimo tanan ports nga wala gigamit para mas limited ang window para sa hacker.

in your case, na lutsan imo system because of some unsecured ports. Obviously the damage would have been bigger if knowledged to cya nga hacker. ky the fact that he was able to inject code sa imo system. Also, if you are running windows, advisable to rename the administrator account. and as for the linux be sure to disallow root user from remote login, buhat lang ug lain user nga gamityon specifically for the purpose.