fix: fixed VNC plugin password field naming and reduced vnc library log verbosity (fixes #82)

Author: evilsocket

src/main.rs

@@ -31,7 +31,7 @@ fn setup() -> Result<Options, session::Error> {
         unsafe {
             env::set_var(
                 "RUST_LOG",
-                "info,blocking=off,pavao=off,fast_socks5=off,actix_server=warn,rmcp=warn,smb=warn,sspi=off,tracing=warn",
+                "info,blocking=off,pavao=off,fast_socks5=off,actix_server=warn,rmcp=warn,smb=warn,sspi=off,tracing=warn,vnc=warn",
             );
         }
     }

src/plugins/vnc/mod.rs

@@ -65,13 +65,11 @@ impl Plugin for VNC {
         .map_err(|e| e.to_string())?;
 
         if vnc.is_ok() && vnc.unwrap().finish().is_ok() {
+            // single payload, the username field is used as the password
             return Ok(Some(vec![Loot::new(
                 "vnc",
                 &address,
-                [
-                    ("username".to_owned(), creds.username.to_owned()),
-                    ("password".to_owned(), creds.password.to_owned()),
-                ],
+                [("password".to_owned(), creds.username.to_owned())],
             )]));
         }
 

test-servers/vnc.sh

@@ -1,4 +1,4 @@
 # vncpassword
 docker run \
-    -p 5901:5901 \
+    -p 5900:5901 \
     consol/debian-xfce-vnc