TightVNC and Colasoft Packet Builder Lab

 Welcome to the remote access and packet analysis lab! In this lab, I will learn how to perform remote access using TightVNC and how to use Colasoft Packet Builder to analyze IP packet headers.

The first part of this lab will focus on using TightVNC for remote access. TightVNC is a popular open-source remote desktop software that allows us to access and control a computer from a remote location. This can be useful in a variety of situations, such as when you need to access a computer that is not physically located near you, or when you need to provide technical support to someone who is not in the same location as you.

To use TightVNC, I will need to install the software on both the computer that I want to access remotely (the server) and the computer that you will use to access the server (the client). Once the software is installed, I can start the TightVNC server on the server and the TightVNC viewer on the client. The viewer  prompts me  to enter the IP address or hostname of the server, as well as the password that I set when I initially installed TightVNC on the server. Once this information is entered, I will be connected to the server and will be able to control it as if you were sitting in front of it.

I can’t really show images of this as it is dangerous because someone could access my computer.

Some of the benefits I see with remote access are:

1: Flexible Work

With Remote access the employees have freedom to work from home or any other location, this helps them to be more productive as they can be relaxed while working

2: Low cost for Business

Remote access means there is no need for having an office building to accommodate people, the organization can just rent a small enclosure for the server equipment, which would cut back the cost a lot which would otherwise be spent on maintaining a space for all employees

3: Centralized Storage and Full control of Authorization access

There is little to no guarantee that the data on a standalone workstation is even being backed up properly and the activity on that workstation is also out of reach, but with remote workspace, the organization can ensure that critical data is being backed up to the servers regularly and remote access also provides the benefit of logging all the activity on a network

The second part of this lab will focus on using Colasoft Packet Builder to analyze IP packet headers. Colasoft Packet Builder is a packet generation and editing tool that allows you to create and modify IP packets. This can be useful for a variety of purposes, such as testing network protocols and simulating network scenarios.

I first went into Wireshark and utilized one of the packets I found to make a Colasoft packet. To use Colasoft Packet Builder, first I will need to download and install the software on my computer. Once it's installed, I launched the application and start creating packets. To create a packet, I needed to specify the various fields in the packet header, such as the source and destination IP addresses, the protocol, and the packet size. I can also add payload data to the packet if I wanted to. Once I have configured the packet to your liking, you can send it over the network by clicking the "Send" button but I won’t do that.


In addition to creating packets, Colasoft Packet Builder also allows you to edit and decode existing packets. To do this, you can use the packet capture feature to capture packets from the network, and then use the packet editor to modify the packets as needed. The packet decoder will then show you the various fields in the packet header and payload in a more readable format. 

In conclusion, we have successfully learned how to perform remote access using TightVNC and how to use Colasoft Packet Builder to analyze IP packet headers. TightVNC allows us to remotely access and control another computer over the internet, making it a useful tool for remotely managing and troubleshooting systems. We also learned how to use Colasoft Packet Builder to create and analyze custom IP packets, which is useful for understanding how packets are constructed and how they flow through a network


Comments

Post a Comment

Popular posts from this blog

Vulnerability Management(Nessus)

Image
Welcome to the vulnerability management lab! In this lab, I will be using Nessus to identify and prioritize vulnerabilities within the Virtual machine. Nessus is a powerful vulnerability scanner that allows us to scan our network and systems for known vulnerabilities, misconfigurations, and other weaknesses that could potentially be exploited by malicious actors.  In this lab, I set up Nessus Essentials, installed Windows 10 inside a virtual machine using VMware Workstation Player, added some outdated software, and performed vulnerability checks on the virtual machine to look for any potential security flaws. Later, I make an effort to fix some of the flaws. I first start by downloading, Vmware Workstation, a windows 10 iso and Nessus. It is crucial to set the network adapter to bridged while constructing the Windows virtual machine. It connects the virtual machine to the physical computer's network so that Nessus can communicate with the virtual machine effortlessly. After complet
Read more

Active Directory Home Lab

Image
In this lab, I'll be utilizing Oracle VirtualBox to run an active directory. I'm undertaking this lab to learn more about Windows networking and how Active Directory functions. Installing VirtualBox will be the first step in getting the virtual machines up and running. I'll next install Windows 10 and Windows Server 2019 isos, which I'll use to set up two different virtual machines with two different operating systems. The domain controller, which will host the active directory, will be the first virtual machine. I'm going to give this virtual machine two network adapters, one for connecting to the public internet and the other for connecting to VirtualBox, which will act as a sort of virtual private network for the clients   After creating the virtual machine, I'll install Server 2019 on it and then assign it an IP address for the internal network. The external network will automatically obtain IP addresses from the home network. I can tell if the adapter is
Read more

Practitioner Lab 2: File path traversal, traversal sequences stripped non-recursively

Image
 This lab contains a path traversal vulnerability in the display of product images. The application strips path traversal sequences from the user-supplied filename before using it. To solve the lab, retrieve the contents of the  /etc/passwd  file. The first thing I do is look at the website and how it is working I see a lot of images so I can use Burp Suite to look at where are all these images coming from Here I can see the request for all these images I will try to change it for another file name to see if I can get it I know it is stripped so I will probably have to use // of them to get it to work. When I try to use the absolute path it doesn’t work because it it stripped. Now I will use the double to see how it works It took me a while but I figured out how it worked. This way it works when it is filtered.
Read more