Vulnerability Development: X Server Test/Exploit

[Crist Clark <crist.clark () GLOBALSTAR COM>]

Does anyone have a quick tool to test for open X servers? I have an
'xkey' style program which eavesdrops keystrokes and mouse actions, but
that has some drawbacks. If I attempt to watch a server and it fails,
I know the server is not promiscuous. However, if it does not fail, that
does not mean the server is promiscuous... For example, there may be no
server running or even no machine at all.

Anyone seen something that can get a more definitive response on the
status of an X server? (Kind of surprised there is no Nessus plugin that
does more than just detect the server... Maybe if someone finds me a test
proggie I can translate it into a plugin. I'm here begging since I
figure it could take some serious time to learn enough Xlib calls
to get a C program, perl script, or NASL script working from scratch.)

Thanks.
--
Crist J. Clark                                Network Security Engineer
crist.clark () globalstar com                    Globalstar, L.P.
(408) 933-4387                                FAX: (408) 933-4926