Add ThinVNC Directory Traversal module

[bcoles]

Add ThinVNC Directory Traversal module.

    This module exploits a directory traversal vulnerability in ThinVNC
    versions 1.0b1 and prior which allows unauthenticated users to retrieve
    arbitrary files, including the ThinVNC configuration file.

    This module has been tested successfully on ThinVNC versions 1.0b1
    and "ThinVNC_Latest" (2018-12-07).

[wchen-r7]

Very straight forward and the module works for me. Very nice!

msf5 auxiliary(scanner/http/thinvnc_traversal) > run

[+] File ThinVnc.ini saved in: /Users/wchen/.msf4/loot/20191023123634_default_172.16.135.133_thinvnc.traversa_795248.txt
[+] Found credentials: admin:admin
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed

[wchen-r7]

Release Notes

This module exploits a directory traversal vulnerability in ThinVNC versions 1.0b1 and prior which allows unauthenticated users to retrieve arbitrary files, including the ThinVNC configuration file.