Manage Your Devices
Approve, deny or revoke the computers and servers that can bring your Remote Access link online. Managed from Settings → Remote access on the XHack website.
Documentation
XHack AI Agent
- CoHunter Guide
- Sub-Agents
- HTTP Repeater
- Background Tasks
- Permission Modes
- Project Memory
- Plugins
- Mobile App Testing
- Findings & Reports
- Web Console
- Turn On the Web Console
- Run the Web Console on a Server
- Install the Console as an App
- Remote Access
- Turn On Remote Access from the Desktop App
- Deploy Remote Access on a VPS
- Approve a Device
- Manage Your Devices
- Remote Access Security Tips
- Remote Access Troubleshooting
- Bug-Bounty Hunting
- Programs
- Run Recon and See What's New
- Background Monitoring
- Start a Full Hunt
- Start a Hunt from an Empty Chat
- Questions from the AI
- Go Full Mode
- Collaborator
- Role Profiles and Access Matrix
- Desktop and Web Console in Sync
Manage Your Devices
Everything to do with who can bring your link online lives on one page: xhack.io → Settings → Remote access.
What is on the page
- Your link and a copy button.
- Every device that has asked for access, grouped by state:
- Pending, waiting for a pairing code.
- Approved, able to bring your link online.
- Denied, blocked unless you turn Remote Access on again on that device.
- Revoked, you removed its access.
- Approve a new device with the pairing code it shows.
- A live feed: the page updates by itself and notifies you when a new request arrives.
Approve a device
See Approve a device. The pairing code is shown only on the device; the website never shows it.
Deny a request you did not start
Click Deny on the request. The device is blocked until you turn Remote Access on there again, which generates a fresh request and a new code.
If you did not start the request, treat it as an attempt on your account:
- change your
xhack.iopassword; - turn on two-factor authentication if it is available;
- revoke any approved device you no longer use.
Revoke a device
Revoke a device you no longer use, one that was lost or stolen, or one that has been quiet for a while. A revoked device cannot bring your link online again unless you approve it again with a new code.
Common times to revoke:
- a laptop you sold or decommissioned;
- a VPS you destroyed;
- a test server you spun up for one engagement and will not use again;
- any device you cannot physically account for.
Only one device brings the link online at a time
Your link points to one approved device at a time. If you turn Remote Access on somewhere else, the link moves to that device and the previous one goes offline. Approved devices that are not currently holding the link stay approved; they can take it back later by turning Remote Access on there.
The Remote link card on the dashboard
The main dashboard has a Remote link card with your link and its current status, so you can see at a glance whether anything is online without opening the Remote access page.
Related
Try XHack AI Now
Experience the full power of XHack directly in your browser. No installation required.
Launch XHack AI