Developed as part of my solution to the 2020 Summerschool CTF, vncreplay replays a VNC session from captured network traffic.
It has some basic functionality to deal with missing or mangled packets, and outputs a standalone interactive player.
First, install dependencies using go mod download
.
After that, use go run build.go
to compile the project.
The main executable takes an input and output file as its arguments. The input file should be a PCAP file (of tcpdump or Wireshark fame), and the output file will be a standalone HTML file one can open in any modern browser. (In order to help the tool along a bit, make sure the pcap is isolated to the TCP stream containing the VNC capture.)
After that, for most use cases, this will do:
vncreplay -o player.html path/to/capture.pcap
This will result in something resembling the following:
This program and its source code are available under the terms of the BSD 3-clause license. Find out what that means here: https://www.tldrlegal.com/l/bsd3