vnclowpot
Low-interaction VNC honeypot. Listens on a port and logs responses to a static
VNC Auth challenge.
It was inspired by VNC-Pot, but does
not have any dependencies outside the go standard library.
Setup and Install
go get github.com/magisterquis/vnclowpot
go install github.com/magisterquis/vnclowpot
vnclowpot
Options
There's only two options:
- The listen address can be changed with
-l
- John The Ripper-compatible lines can be generated with
-j
(and will need
to be extracted from the log messages with something like cut -f 4 -d ' '
).
Pull requests are welcome.
Cracker
In the cracker directory there is a simple program to try to
crack the handshakes logged in John The Ripper format. See its
README for more details.
Tester
In the tester directory there is a simple program to generate VNC
authentication attepmts, for use in testing vnclowpot, as well as being
production-grade for pentesting. See its README for more
details.
Windows
Should probably work.