[kareem zaky]

i follow all steps in browser in browser attack , finally i got a blank page ,

kindly check the attached screen shot

Attachments:

You must be logged in to view attached files.

[kareem zaky]

on on my machine i got this error

└─# websockify –web /usr/share/novnc –target-config /home/tokens –cert /etc/letsencrypt/live/buildyourcareer.shop/fullchain.pem –key /etc/letsencrypt/live/buildyourcareer.shop/privkey.pem my_ip:443
WebSocket server settings:
– Listen on my_ip:443
– Web server. Web root: /usr/share/novnc
– SSL/TLS support
– proxying from my_ip:443 to targets generated by TokenFile
Syntax error in /home/tokens on line 1
Syntax error in /home/tokens on line 2
77.31.254.28: Token ‘trythis’ not found
Syntax error in /home/tokens on line 1
Syntax error in /home/tokens on line 2
77.31.254.28: Token ‘trythis’ not found

this is token file content

trythis localhost:5901
tryme localhost:5902

[Diego Pérez]

Hi!
Make sure that all vnc servers are running properly. Also make sure to use the eth0 ip address in the websockify command not the public ip.

Greetings!
Diego

[kareem zaky]

All vnc running well , i already use etho ip in websokify command

And got the same error

[kareem zaky]

any update ?

[Diego Pérez]

Hi!
Once you start the VNC ervers run the command “ss -lntp” and share a screenshot here.
Can you share a screenshot with the websockify command used and the result please?

Thanks!
Diego

[kareem zaky]

this is the result of the command

sudo vncserver -geometry 1080×1920 -depth 32 -localhost no

State Recv-Q Send-Q Local Address:Port Peer Address:Port Process
LISTEN 0 5 0.0.0.0:5902 0.0.0.0:* users:((“Xtigervnc”,pid=2947,fd=9))
LISTEN 0 5 0.0.0.0:5903 0.0.0.0:* users:((“Xtigervnc”,pid=16927,fd=9))
LISTEN 0 5 0.0.0.0:5901 0.0.0.0:* users:((“Xtigervnc”,pid=700,fd=9))
LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:((“sshd”,pid=600,fd=3))
LISTEN 0 5 [::]:5902 [::]:* users:((“Xtigervnc”,pid=2947,fd=10))
LISTEN 0 5 [::]:5903 [::]:* users:((“Xtigervnc”,pid=16927,fd=10))
LISTEN 0 5 [::]:5901 [::]:* users:((“Xtigervnc”,pid=700,fd=10))
LISTEN 0 128 [::]:22 [::]:* users:((“sshd”,pid=600,fd=4))

websockify command :

websockify –web /usr/share/novnc –target-config /tokens –cert /etc/letsencrypt/live/mydomain.shop/fullchain.pem –key /etc/letsencrypt/live/mydomain.shop/privkey.pem my_cloud_machine_IP:443
WebSocket server settings:
– Listen on my_cloud_machine_IP:443
– Web server. Web root: /usr/share/novnc
– SSL/TLS support
– proxying from my_cloud_machine_IP:443 to targets generated by TokenFile

[kareem zaky]

i got this error

websockify –web /usr/share/novnc –target-config tokens –cert /etc/letsencrypt/live/buildyourcareer.shop/fullchain.pem –key /etc/letsencrypt/live/buildyourcareer.shop/privkey.pem 172.104.15.223:443
WebSocket server settings:
– Listen on 172.104.15.223:443
– Web server. Web root: /usr/share/novnc
– SSL/TLS support
– proxying from 172.104.15.223:443 to targets generated by TokenFile
Syntax error in /root/tokens on line 1
Syntax error in /root/tokens on line 2
170.133.124.37: Token ‘trythis’ not found
Syntax error in /root/tokens on line 1
Syntax error in /root/tokens on line 2
170.133.124.37: Token ‘connect’ not found

my token file

connect localhost:5901
gmail localhost:5902

[Diego Pérez]

Hi!
Can you share the screenshot with the result of the command requested above?
Also, it would be better to share screenshots as the copy/paste is not accurate. Share a screenshot with the contents of the token file as well.

Greetings!
Diego

[kareem zaky]

“ss -lntp” command result

Attachments:

You must be logged in to view attached files.

[kareem zaky]

token file content

Attachments:

You must be logged in to view attached files.

[kareem zaky]

websokify command

Attachments:

You must be logged in to view attached files.

[kareem zaky]

final error

Attachments:

You must be logged in to view attached files.

[Diego Pérez]

Hi!
So, are you getting that error message after trying to access the vnc server through the browser? If so, can you share the URL used to try to access it?

Greetings!
Diego

[kareem zaky]

https://buildyourcareer.shop/?path=?token=connect

[Author]

Posts