SecPod

Learn Search

Search across all Learn content

← Back to Expressions & POVs
Hack VMware Remote Console (Firefox add-on) to Run Independently !!!

Hack VMware Remote Console (Firefox add-on) to Run Independently !!!

In firefox version 3.6 or higher, VMware Remote Console Plug-in will not load properly. To open VMWare Remote Console, there is a small hack were we can load VMware Remote Console independently without running older version of firefox. A good patch management tool can prevent such attacks.

Oct 27, 2013By Veerendra GG2 min read

In firefox version 3.6 or higher, VMware Remote Console Plug-in will not load properly. To open VMWare Remote Console, there is a small hack were we can load VMware Remote Console independently without running older version of firefox. A good patch management tool can prevent such attacks.

Skip to step 5 if VMware Server and VMware Remote Console Plug-in are already installed.

1) Install the VMware Server 2.x

2) Access VMware Web Access Management
http://localhost:8222 OR https://localhost:8333

3) When we try to access console tab it complains saying “The VMware Remote Console Plug-in is not installed or could not be found.”

4) Click on “Install plug-in” to install the VMware Remote Console Plug-in as a firefox add-on.

5) Now we can find VMware Remote Console Plug-in inside “.mozilla” in your home directory under “extensions” folder. Below command will give the path of VMware Remote Console Plug-in
user@ubuntu# cd ~/.mozilla && find . -iname [email protected]

6) Copy VMware Remote Console Plug-in directory to your chosen path.
user@ubuntu# cp -r ./firefox/acdnde.default/extensions/[email protected] ~/vmware-console

7) Change directiory “~/vmware-console/plugins/” and assign execute permission to “vmware-vmrc”. Execute “./vmware-vmrc” to get the VMware Remote Console Window.
user@ubuntu# cd ~/vmware-console/plugins/
user@ubuntu# chmod +x vmware-vmrc”
user@ubuntu# ./vmware-vmrc

VMware Remote Console appears as show below

NOTE: If it is not showing the below “VMware Remote Console” Window, Set “VMWARE_USE_SHIPPED_GTK” variable to “yes”
user@ubuntu# export VMWARE_USE_SHIPPED_GTK=yes

8) Connect to server by giving VMware server IP address with port 8333 and credentials as shown below.

9) If authentication is successful, it will list available “Virtual Images” in the VMware Server as show below,

10) Select the virtual image which we want to access.

Alternatively, we can extract the plugin from VMware Server installation located @
“/usr/lib/vmware/webAccess/tomcat/apache-tomcat-6.0.16/webapps/ui/plugin/vmware-vmrc-linux-x86.xpi” and “unzip vmware-vmrc-linux-x86.xpi”

Repeat the same procedure from step 6.

This way we can run VMware Remote Console independently without installing old firefox to get VMware Remote Console.

Cheers!!!
Veerendra GG

Featured Posts

Open The Most Effective Vulnerability Assessment Framework What Makes One Effective
The Most Effective Vulnerability Assessment Framework What Makes One Effective

Point of View

The Most Effective Vulnerability Assessment Framework What Makes One Effective

No single named standard makes a vulnerability assessment framework effective. This piece covers NIST, ISO, and CIS Controls, then breaks down what actually separates a working framework from a checklist, coverage, risk based prioritization, cadence, ownership, and a feedback loop.

Sep 11, 2026

Open Threat and Vulnerability Assessment How Risk Actually Gets Calculated
Threat and Vulnerability Assessment How Risk Actually Gets Calculated

Point of View

Threat and Vulnerability Assessment How Risk Actually Gets Calculated

A vulnerability alone doesn't tell the whole risk story. This piece breaks down how a threat and vulnerability assessment pairs technical weaknesses with real attacker context, walks through the six step process, and covers frameworks like NIST 800-30 and ISO 27005.

Sep 11, 2026

Open Vulnerability Assessment Services: What to Look For
Vulnerability Assessment Services: What to Look For

Point of View

Vulnerability Assessment Services: What to Look For

Choosing a vulnerability assessment provider means asking about actual coverage, scan frequency, and whether findings come with real prioritization or just a CVSS dump. This piece breaks down what strong vulnerability assessment services include, red flags to avoid, and questions to ask before signing.

Sep 11, 2026

Open Agentic AI Vulnerability Assessment What Changes and What Does Not
Agentic AI Vulnerability Assessment What Changes and What Does Not

Point of View

Agentic AI Vulnerability Assessment What Changes and What Does Not

Agentic AI is expanding what a vulnerability assessment needs to cover, autonomous agents bring their own credentials, tool access, and memory, adding a genuinely new asset class alongside servers and endpoints. It's also compressing attacker timelines and introducing risk categories like goal hijacking and tool misuse that don't map to a traditional CVE. But the core discipline hasn't changed: the same lifecycle of scoping, scanning, prioritizing, and remediating still applies, human judgment still drives prioritization, and accountability still sits with the people who deployed the agent, not the agent itself.

Sep 9, 2026