hi everybody
thank for your read my topic
please help me this matter
this is i have speard some rat and got some victim , i have full permission on their computer
but dont know how to get password from their vnc on computer like this picture
i know about use keyloger , but this one need lucky , so i dont care to much
or i have heard about psxec ,but never do it before
so please suggest me someway better
thank you so much
Aug 7, 2025 03:26 AM
(This post was last modified: Aug 7, 2025 03:33 AM by DramaKing.)
(Aug 7, 2025 03:07 AM)vira Wrote: hi everybody
thank for your read my topic
please help me this matter
this is i have speard some rat and got some victim , i have full permission on their computer
but dont know how to get password from their vnc on computer like this picture
![[Image: vnc.png]](https://i.ibb.co/cSWRgkPc/vnc.png)
i know about use keyloger , but this one need lucky , so i dont care to much
or i have heard about psxec ,but never do it before
so please suggest me someway better
thank you so much
It doesn't look like the password is saved, so the only way if you don't want to use keylogging, is to capture packets. You can't run Cain in the background, so tshark will be a requirement.
psexec is not applicable to VNC.
(Aug 7, 2025 03:26 AM)DramaKing Wrote: It doesn't look like the password is saved, so the only way if you don't want to use keylogging, is to capture packets. You can't run Cain in the background, so tshark will be a requirement.
oh ok thank so much for your reply
i still use keylog , but this one is depend lucky so maybe its not effective hight
could you pls suggest me some method better ? i will be glad to share some resources for you
thank you
Encryption can be added to UltraVNC, so you're pretty much out of luck at that point. You could also enable a reverse proxy if available and try to bruteforce (assuming that the server is on a local network) the password.
(Aug 7, 2025 03:32 AM)DramaKing Wrote: Encryption can be added to UltraVNC, so you're pretty much out of luck at that point. You could also enable a reverse proxy if available and try to bruteforce (assuming that the server is on a local network) the password.
thank for your reply so much
but its seem all method not hight rate sucessfully
and i have heard about psexec , i dont know hight rate sucessfully or not , if you or anyones know this method , please show me
i will glad to share some resources for you
Aug 7, 2025 02:39 PM
(This post was last modified: Aug 7, 2025 02:40 PM by DramaKing.)
(Aug 7, 2025 02:30 PM)vira Wrote: thank for your reply so much
but its seem all method not hight rate sucessfully
and i have heard about psexec , i dont know hight rate sucessfully or not , if you or anyones know this method , please show me
i will glad to share some resources for you
PsExec is used to login and execute commands or executables on Windows systems remotely using RPC. It has nothing to do with VNC as stated before.
I don't care about your resources.
(Aug 7, 2025 02:39 PM)DramaKing Wrote: PsExec is used to login and execute commands or executables on Windows systems remotely using RPC. It has nothing to do with VNC as stated before.
I don't care about your resources.
oh ok thank you my brother
so i need do 2 method is
1 is keyloger
2 is bruteforce password right ?
Is there any other way? i have heard somethings like copy file ultravnc.ini to view and encode pass , or use tool viewvncpass from nirsoft , so do you know about 2 method ?
thank you so much
Aug 7, 2025 06:08 PM
(This post was last modified: Aug 7, 2025 06:09 PM by DramaKing.)
(Aug 7, 2025 03:38 PM)vira Wrote: oh ok thank you my brother
so i need do 2 method is
1 is keyloger
2 is bruteforce password right ?
Is there any other way? i have heard somethings like copy file ultravnc.ini to view and encode pass , or use tool viewvncpass from nirsoft , so do you know about 2 method ?
thank you so much
Just to be clear, those are either/or methods. And the third option is sniffing the password. VNC is usually plaintext. The commercial alternatives are much more secure.
I didn't suggest stealing the password from disk because your screenshot shows no password.
(Aug 7, 2025 06:08 PM)DramaKing Wrote: Just to be clear, those are either/or methods. And the third option is sniffing the password. VNC is usually plaintext. The commercial alternatives are much more secure.
I didn't suggest stealing the password from disk because your screenshot shows no password.
okay brother
thank for your suggest so much
i think i can belive i can solve myself from your suggest now
|