What is rustyvnc?

RustyVNC is a tool built for red team security testing. It lets an authorized operator watch and control a Windows desktop remotely, similar in spirit to VNC, but built as two separate pieces that talk to each other over an encrypted connection. The project has two parts. The client runs on the Windows machine being observed. It is written in Rust and handles capturing the desktop, encoding what it sees as JPEG images, launching applications, and sending back mouse and keyboard input. The server runs on the operator's own machine, written in Go, and handles the network connection, checks that incoming frames are valid, sends the video feed out to anyone viewing it, and serves a small browser page for viewing. To use it, you start the server first, which listens on a local address and either uses a certificate you provide or creates a temporary one on the spot. You then open the viewer in a web browser at that address. The Windows client is built separately using a cross compiler and then run directly on the target machine, pointed at the server's address. Under the hood, the client tries to open a secure, real time connection to the server, called a WebSocket. If that is not available, it falls back to sending updates over regular encrypted web requests instead. Either way, the connection is encrypted, the tool refuses to run over an unencrypted link. The client will not run in certain background Windows sessions, since those produce blank output instead of a real view of the desktop. Right now, the project supports only one connected viewer at a time, which keeps the code simpler while the core features are still settling. The README notes that the server should stay on the local machine by default, and that anyone exposing it more broadly should add proper certificates, an access token, and keep it on a private network. The author states plainly that this is meant for authorized research and defense analyst work, not for general use against systems the operator does not control.