5900 - VNC

Theory

Virtual Network Computing (VNC) is another popular service that is used for remoting purposes. VNC is commonly used on Linux hosts with a graphical user interface (e.g., GNOME), and it uses TCP port 5900 by default.

---

Practical

Nmap Scan

nmap ‐sV ‐T5 ‐p 5900 ‐‐script=vnc* <IP>

Metasploit

msfconsole -q

use auxiliary/scanner/vnc/vnc_login

SET RHOSTS <IP>

set VERBOSE false

set STOP_ON_SUCCESS true

run

---

REFERENCES

• https://book.hacktricks.xyz/network-services-pentesting/pentesting-vnc

• https://www.hackingarticles.in/vnc-penetration-testing/

• https://medium.com/@jbtechmaven/penetration-testing-series-hacking-metasploitable-2-by-exploiting-vnc-port-5900-188f7cc44b8

• https://www.offsec.com/metasploit-unleashed/vnc-authentication/