RE: msf > use auxiliary/scanner/vnc/vnc_login

ToddAndMargo,

May I suggest that you ask those questions in the #metasploit IRC channel on the Freenode network (chat.freenode.net)? There are plenty of active users in there who may be able to respond quicker than the securityfocus mail list.

Cheers,

Ben Ten

-----Original Message-----

>> On Oct 31, 2013 1:34 PM, "ToddAndMargo" <[email protected]
>> <mailto:[email protected]>> wrote:
>>
>>     Hi All,
>>
>>     I decided to test Metasploit against an open VNC
>>     server, following the following directions:
>>
>>     https://www.rapid7.com/db/__modules/auxiliary/scanner/vnc/__vnc_login <https://www.rapid7.com/db/modules/auxiliary/scanner/vnc/vnc_login>
>>
>>     After entering at the msf prompt:
>>         use auxiliary/scanner/vnc/vnc___login
>>
>>     I never get my prompt back.
>>
>>     According to the directions, I should
>>     be able to enter:
>>           msf auxiliary(vnc_login) > show actions
>>
>>     What am I missing?
>>
>>     Many thanks,
>>     -T
>>

On 10/31/2013 09:17 AM, Ivan Carlos wrote:
> This server is vulnerable against this exploit?
>
> Ivan Carlos
> CISO, Consultant
> +55 (11) 98112-0666
> www.icarlos.net <http://www.icarlos.net>
>

Hi Ivan,

   I think I understand.  If the vnc server rejects the
exploit, you never get the "msf" prompt back because
it never proceeded far enough with the exploit.

   So, this is good news?  Be nice if you got some
feedback as to trying and not working.

-T


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------