I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below.
I am using auxiliary/scanner/vnc/vnc_login
, after seeing that the 5900 port is open on Metasploitable. Furthermore, given that the credentials to log into Metasploitable are:
username - msfadmin
password - msfadmin
When I run the exploit with settings the IP to that of Metasploitable, and set the USERNAME and PASSWORD to "msfadmin" (and set THREADS to 50) whilst also including "msfadmin" as an entry in both the USER_FILE and PASS_FILE which I provided (in which I just appended "msfadmin" to the rockyou.txt file contained in /usr/share/wordlists/rockyou.txt
).
Upon executing the exploit, for some reason I get success for the following:
[+] 192.168.XXX.XXX:5900 - LOGIN SUCCESSFUL: :password
Where is the username indicated in this? And why does (from my guess) the string "password" allow the exploit to authenticate?