Security Basics
Re: msf > use auxiliary/scanner/vnc/vnc_login Oct 31 2013 05:47PM
ToddAndMargo (ToddAndMargo zoho com)
>> On Oct 31, 2013 1:34 PM, "ToddAndMargo" <ToddAndMargo (at) zoho (dot) com [email concealed]
>> <mailto:ToddAndMargo (at) zoho (dot) com [email concealed]>> wrote:
>>
>> Hi All,
>>
>> I decided to test Metasploit against an open VNC
>> server, following the following directions:
>>
>> https://www.rapid7.com/db/__modules/auxiliary/scanner/vnc/__vnc_login <https://www.rapid7.com/db/modules/auxiliary/scanner/vnc/vnc_login>
>>
>> After entering at the msf prompt:
>> use auxiliary/scanner/vnc/vnc___login
>>
>> I never get my prompt back.
>>
>> According to the directions, I should
>> be able to enter:
>> msf auxiliary(vnc_login) > show actions
>>
>> What am I missing?
>>
>> Many thanks,
>> -T
>>

On 10/31/2013 09:17 AM, Ivan Carlos wrote:
> This server is vulnerable against this exploit?
>
> Ivan Carlos
> CISO, Consultant
> +55 (11) 98112-0666
> www.icarlos.net <http://www.icarlos.net>
>

Hi Ivan,

I think I understand. If the vnc server rejects the
exploit, you never get the "msf" prompt back because
it never proceeded far enough with the exploit.

So, this is good news? Be nice if you got some
feedback as to trying and not working.

-T

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus