Hack Forums
ask method get pass vnc from RAT - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: ask method get pass vnc from RAT (/showthread.php?tid=6305165)

ask method get pass vnc from RAT - vira - Aug 7, 2025

hi everybody
thank for your read my topic

please help me this matter
this is i have speard some rat and got some victim , i have full permission on their computer

but dont know how to get password from their vnc on computer like this picture

[Image: vnc.png]


i know about use keyloger , but this one need lucky , so i dont care to much
or i have heard about psxec ,but never do it before
so please suggest me someway better

thank you so much

RE: ask method get pass vnc from RAT - DramaKing - Aug 7, 2025

(Aug 7, 2025 03:07 AM)vira Wrote:  hi everybody
thank for your read my topic

please help me this matter
this is i have speard some rat and got some victim , i have full permission on their computer

but dont know how to get password from their vnc on computer like this picture

[Image: vnc.png]


i know about use keyloger , but this one need lucky , so i dont care to much
or i have heard about psxec ,but never do it before
so please suggest me someway better

thank you so much

It doesn't look like the password is saved, so the only way if you don't want to use keylogging, is to capture packets. You can't run Cain in the background, so tshark will be a requirement.

psexec is not applicable to VNC.

RE: ask method get pass vnc from RAT - vira - Aug 7, 2025

(Aug 7, 2025 03:26 AM)DramaKing Wrote:  It doesn't look like the password is saved, so the only way if you don't want to use keylogging, is to capture packets. You can't run Cain in the background, so tshark will be a requirement.

oh ok thank so much for your reply
i still use keylog , but this one is depend lucky so maybe its not effective hight
could you pls suggest me some method better ? i will be glad to share some resources for you
thank you

RE: ask method get pass vnc from RAT - DramaKing - Aug 7, 2025

Encryption can be added to UltraVNC, so you're pretty much out of luck at that point. You could also enable a reverse proxy if available and try to bruteforce (assuming that the server is on a local network) the password.

RE: ask method get pass vnc from RAT - vira - Aug 7, 2025

(Aug 7, 2025 03:32 AM)DramaKing Wrote:  Encryption can be added to UltraVNC, so you're pretty much out of luck at that point. You could also enable a reverse proxy if available and try to bruteforce (assuming that the server is on a local network) the password.

thank for your reply so much
but its seem all method not hight rate sucessfully
and i have heard about psexec , i dont know hight rate sucessfully or not , if you or anyones know this method , please show me
i will glad to share some resources for you

RE: ask method get pass vnc from RAT - DramaKing - Aug 7, 2025

(Aug 7, 2025 02:30 PM)vira Wrote:  thank for your reply so much
but its seem all method not hight rate sucessfully
and i have heard about psexec , i dont know hight rate sucessfully or not , if you or anyones know this method , please show me
i will glad to share some resources for you

PsExec is used to login and execute commands or executables on Windows systems remotely using RPC. It has nothing to do with VNC as stated before.

I don't care about your resources.

RE: ask method get pass vnc from RAT - vira - Aug 7, 2025

(Aug 7, 2025 02:39 PM)DramaKing Wrote:  PsExec is used to login and execute commands or executables on Windows systems remotely using RPC. It has nothing to do with VNC as stated before.

I don't care about your resources.

oh ok thank you my brother

so i need do 2 method is

1 is keyloger
2 is bruteforce password right ?

Is there any other way? i have heard somethings like copy file ultravnc.ini to view and encode pass , or use tool viewvncpass from nirsoft , so do you know about 2 method ?

thank you so much

RE: ask method get pass vnc from RAT - DramaKing - Aug 7, 2025

(Aug 7, 2025 03:38 PM)vira Wrote:  oh ok thank you my brother

so i need do 2 method is

1 is keyloger
2 is bruteforce password right ?

Is there any other way? i have heard somethings like copy file ultravnc.ini to view and encode pass , or use tool viewvncpass from nirsoft , so do you know about 2 method ?

thank you so much

Just to be clear, those are either/or methods. And the third option is sniffing the password. VNC is usually plaintext. The commercial alternatives are much more secure.

I didn't suggest stealing the password from disk because your screenshot shows no password.

RE: ask method get pass vnc from RAT - vira - Aug 8, 2025

(Aug 7, 2025 06:08 PM)DramaKing Wrote:  Just to be clear, those are either/or methods. And the third option is sniffing the password. VNC is usually plaintext. The commercial alternatives are much more secure.

I didn't suggest stealing the password from disk because your screenshot shows no password.

okay brother
thank for your suggest so much
i think i can belive i can solve myself from your suggest now