Expert analysis: full access to Radmin Network Attack and Defense

Radmin is a world-renowned remote control software. Its full control, file transmission, Telnet commands, and other functions are very useful. In versions earlier than Radmin3.0, anti-virus software does not kill it, later, as hackers and viruses use r_server as a medium, R_server is used as a security threat. Currently, anti-virus software and firewalls that take the initiative to defend against attacks will list R_server as a blacklist, although Radmin is favored by network security. There are many articles and works about Radmin. For example, radmin hash connector can be directly connected as long as the hash value of radmin is obtained, you do not need to know the password.

This article introduces the Radmin software from the perspective of Network Attack and Defense. Through this article, readers can learn a lot about Radmin attack and protection.

1. Radmin Introduction

Radmin is short for Remote Administrator, the official website (http://www.radmin.com) interpreted as PC Remote Control Software and Remote Access Software (PC Remote Control and Remote Access Software ), it is an award-winning remote control software. The latest version is 3.4. It integrates remote control, outsourced service components, and network monitoring into a system, provides the fastest, most robust, and secure toolkit so far.

(1) Main Features

1. Maximum operating speed

Radmin is currently the fastest remote control software. Its Direct Screen Transfer™The technology uses the Video hook kernel model driver to increase the capture rate to hundreds of screen updates per second. With its special low-bandwidth optimization function, you can work smoothly when using a dial-up Modem and GPRS connection.

2. highest security level

Radmin works in encrypted mode and uses a random 256-bit AES key to encrypt all data, screen images, mouse movement, and keyboard signals connected to a remote computer. You can use Windows Security or Radmin Security. Windows Security supports different permissions for specific users, or different permissions for user groups in the primary domain, trusted domain, and Active Directory. Supports automatic use of Logon user creden。 and Kerberos authentication. Radmin Security supports different permissions for users added to the Radmin Server access list. Radmin user authentication uses the new Diffie-Hellman-based Key Exchange, with a key length of 2048 bits. IP Filter only allows access to the Radmin Server from a specific IP address and network. The DNS name and user name added to the log file. Smart protection password guesses that automatic delay will occur after five wrong logon attempts.

3. Hardware supports intel®Remote Control of AMT new product!

Radmin 3.4 supports intel®AMT (active management technology), which allows remote computer control, even if the operating system is disabled or cannot be started. You can use the Radmin browser to enable, restart, and disable remote computers. It also allows users to view and modify the remote computer's BIOS settings and start it from a local CD or disk image file.

4. fully compatible with Windows 7 new features!

Radmin 3.4 fully supports Windows 7 32-bit and 64-bit, including User Account Control and quick User Switching. Radmin server 3.4 supports Windows 7/Vista/XP/2008/2003/2000 (32-bit) and Windows 7/Vista/XP/2008/2003 (64-bit) operating systems. Radmin player 3.4 supports Windows 7/Vista/XP/2008/2003/2000/ME/98/95/NT4.0 (32-bit) and Windows 7/Vista/XP/2008/2003 (64-bit) operating System.

5. Simple operations and support for multiple connections

Radmin allows the controlled end to run as a service, supports multiple connections, and filters IP addresses (that is, allows specific IP addresses to control remote machines), personalized file transfer, remote shutdown, support for high-resolution mode, Windows NT-based security support, password protection, and log file support. Radmin currently supports TCP/IP and is widely used.

(2) software composition

The Radmin software is divided into two parts: the Server (Radmin Server) and the browser (Radmin Viewer). In earlier versions, the two parts are integrated and separated in Versions later than 3.0. Radmin viewer.exe (server. The Installation File Path is changed from "C: Program FilesRadmin" to "C: WINDOWSsystem32server30". There are 25 main Program files in total.