This is awesome because before that I had to use Immunity's VAAseline to do VNC bruteforcing. But now you can just use vnc_login.
So the scenario is you find yourself on the other end of a VNC server.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK7sEHN1fK4C-vXfK6oTaWQN1ZW4U1xciSDyAIJotMCWdjKuEbLcTTsYXqB1EX1w152btSIJD1K3A3SUTUUYnvpG87UqzTA15FzTRtcpXMDp_X1KuWtBiBikKjV2EI7H8T4QCz2XOsbHU/s400/vnc-login1.png)
Its tedious to password guess like this
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKAEhdjGkFC2-CQIbKxy5taeCZW9B9kM6vmIwg2ex_eUYRdf8wM7qKGpSgtHYz4jTYjkcCWPUMN1Dh3fPmfBakhReXMgpQzSYJ8wKhUqGtvn_ciZ7jZG3GbOy5VXwfajl8P6AFE6lc5hY/s400/vnc-login2.png)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisT-_FNANI3V71c2jsvKDClcKQkukZfEAoK5sPcW7aaCYBrrSSxJaX2yUQ3H2wa_YscW6-TM2e_OLTG5b43Vt8c3NEBhbBwjZviBewNOauyRaGMNUDGSMQw4PkHodGoXVOp2iXCoua9p8/s400/vnc-login3.png)
and throw a dictionary attack against the VNC server
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyJhDBjMoEGlqoIz1drxHn3d-my2lUhJ_Bb7QohGH1lcQ100F3g4NLErb5BexivLnX-4M-jBwSOgZjHNWQjaIfQtINkzrEyylAJdcQsZfRuMEnt7ykesb0EWIGekNFJsd_OH_vMoBlYq0/s400/vnc-login4.png)
Looks like the VNC no auth module had been ported and stuck in there too :-)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwVmxrmS4G3tlh8xCbUST5mEeSxhrgOAvEFXCdKKJfHaTv6YQIqsNc_xbkKktZA3jz1Xlbbg08bAdizaMKzdiR890-b9TLtkYvXkxMt3ugUNTnmAmos2X5i3PGiwwF0sFEu91EpTlDg1g/s400/vnc-login5.png)
# 2009 - 2011
LooooL
ReplyDelete