Low-interaction VNC honeypot with a static challenge.
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
cracker Log if all passwords are in potfile Jul 30, 2017
tester Remove debug statement Sep 2, 2017
.gitignore Ignore cracker Jul 28, 2017
LICENSE Updated dates Jul 20, 2017
README.md tester initial commit Aug 27, 2017
vnclowpot.go Updated dates Jul 20, 2017

README.md

vnclowpot

Low-interaction VNC honeypot. Listens on a port and logs responses to a static VNC Auth challenge.

It was inspired by VNC-Pot, but does not have any dependencies outside the go standard library.

Setup and Install

go get github.com/magisterquis/vnclowpot
go install github.com/magisterquis/vnclowpot
vnclowpot

Options

There's only two options:

  • The listen address can be changed with -l
  • John The Ripper-compatible lines can be generated with -j (and will need to be extracted from the log messages with something like cut -f 4 -d ' '). Pull requests are welcome.

Cracker

In the cracker directory there is a simple program to try to crack the handshakes logged in John The Ripper format. See its README for more details.

Tester

In the tester directory there is a simple program to generate VNC authentication attepmts, for use in testing vnclowpot, as well as being production-grade for pentesting. See its README for more details.

Windows

Should probably work.