Hey again! I just spent a couple of hours trying to set up jaqen to simulate an attack on servers and domains that I own, and I'm sad to report that I couldn't get it working. Steps to reproduce:
- Point attacker.domain namesever to the host running jaqen
- Build and run jaqen
$ sudo ./jaqen --base-uri=http://attacker.domain --dns-bind=XXX.XX.XX.XX:53 --http-bind=XXX.XX.XX.XX --http-pool=XXX.XX.XX.XX -v
- Set up a virtual machine with host-only networking. Run a webserver on this virtual machine.
- From the VM host machine, make a request to http://attacker.domain and cross my fingers?
Every request simply returns an html page with the word "Index", except for requests for pages in manager.go, which return either 404 or something like:
ERRO[0009] websocket: not a websocket handshake: 'upgrade' token not found in 'Connection' header
2017/08/24 16:27:41 http: multiple response.WriteHeader calls
Did I make an error with my setup?
Hey again! I just spent a couple of hours trying to set up jaqen to simulate an attack on servers and domains that I own, and I'm sad to report that I couldn't get it working. Steps to reproduce:
$ sudo ./jaqen --base-uri=http://attacker.domain --dns-bind=XXX.XX.XX.XX:53 --http-bind=XXX.XX.XX.XX --http-pool=XXX.XX.XX.XX -v
Every request simply returns an html page with the word "Index", except for requests for pages in
manager.go, which return either 404 or something like:Did I make an error with my setup?