VNC Resolver

This is both funny and scary. A quick look through some of them reveals (no links on purpose):<p>- Some UI in Swedish to control the heating system (+warm water) of two houses - A host where the username and password are written in clear text with a gentle message of &quot;use sudo to gain root access&quot; - somebody&#x27;s browser logged onto something that looks like a crypto mining sys. - an homeassistant prompt, ready for control..<p>As usual the IoT dominates and many open systems seem to be related to some visualisation or control.

This is kind of funny. Half tempted to run one with an advertisement background and see who&#x27;ll rent some pixels.

Wow, this brought back memories. I could swear I wrote a blog post about this years ago but couldn&#x27;t find it.<p>A quick search on the local file system revealed `vnccrawl&#x2F;crawler.py` from 2016 [1] using what looks like a Shodan data dump and calling out to `vncviewer.exe`. I remember randomly logging into some instances and also seeing a lot of cool random systems, including a lot of them controlling industrial systems. Guess I never ended up writing that post.<p>One would think that on today&#x27;s Internet it would take only a couple of seconds for those to get compromised, but obfuscation as security, perhaps?<p>[1]: A random tip from that file: Using a password of 12345678 gives access to way more &#x27;weakly secure&#x27; instances.

I found one that looks like a CNC Router control interface, having that exposed to random hackers is not only a security problem, it&#x27;s a safety issue. If someone moved that thing while an operator was working inside, they could cause a serious injury without even knowing

<a href="https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;48195007" rel="nofollow">https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;48195007</a><p>Alarm system? Irrigation? Whatever it is, might be easy to find on a map...

Does anyway know what this is? <a href="https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;93018360" rel="nofollow">https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;93018360</a>

VNC servers exposed directly to the Internet are horrifying but sadly predictable.<p>&quot;sorry man but i didnt do it ithis time please check your vnc&quot;: <a href="https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;1011316" rel="nofollow">https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;1011316</a><p>Thinking aloud: It makes me want to put up a VNC honeypot for fun. I&#x27;ve got a KVM switch that supports VNC that I ought to expose to the Internet. Plugging-in a vintage PC w&#x2F; no network interface card and a wacky operating system might be interesting. I guess I&#x27;d just capture the VNC traffic to watch the action. Hmm... now I have to research playing-back captured VNC sessions.<p>Edit: <a href="https:&#x2F;&#x2F;github.com&#x2F;thijzert&#x2F;vncreplay">https:&#x2F;&#x2F;github.com&#x2F;thijzert&#x2F;vncreplay</a> looks promising.

My favorites:<p>* <a href="https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;71726833" rel="nofollow">https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;71726833</a><p>* <a href="https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;45498402" rel="nofollow">https:&#x2F;&#x2F;computernewb.com&#x2F;vncresolver&#x2F;browse&#x2F;#id&#x2F;45498402</a> don&#x27;t (or do!) google keywords from the filename. I&#x27;d hoped my guess was wrong, but it wasn&#x27;t.<p>* Uh, a Windows session, no lock screen wallpaper, from Ashburn, VA. Hmmmm.<p>Man, this is just nuts. There are so many screens I&#x27;m looking at that appear unguarded. I hope most of them have input turned off, but I doubt it.

very funny :)