documentation/modules/auxiliary/scanner/vnc/vnc_login.md
This module will test a VNC server on a range of machines and report successful logins. Currently it supports RFB protocol version 3.3, 3.7, 3.8 and 4.001 using the VNC challenge response authentication method.
use auxiliary/scanner/vnc/vnc_loginset RHOSTS [IP]set password [password]runmsf > use auxiliary/scanner/vnc/vnc_login
msf auxiliary(scanner/vnc/vnc_login) > set rhosts 111.111.1.222
rhosts => 111.111.1.222
msf auxiliary(scanner/vnc/vnc_login) > set rport 5901
rport => 5901
msf auxiliary(scanner/vnc/vnc_login) > set password 111122223333
password => 111122223333
msf auxiliary(scanner/vnc/vnc_login) > run
[*] 111.111.1.222:5901 - 111.111.1.222:5901 - Starting VNC login sweep
[+] 111.111.1.222:5901 - 111.111.1.222:5901 - Login Successful: :111122223333
[-] 111.111.1.222:5901 - 111.111.1.222:5901 - LOGIN FAILED: :password (Incorrect: Authentication failed: Authentication failed)
[*] 111.111.1.222:5901 - Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(scanner/vnc/vnc_login) >
Once the module has finished running one can observe the gathered credentials using the creds command:
msf auxiliary(scanner/vnc/vnc_login) > creds
Credentials
===========
host origin service public private realm private_type JtR Format
---- ------ ------- ------ ------- ----- ------------ ----------
111.111.1.222 111.111.1.222 5901/tcp (vnc) 111122223333 Password