Cuckoo: Remote control via Guacd not working after upgrade to 2.0.7.

[tcannon9132]

My issue is: Remote control via Guacd not working after upgrade to 2.0.7. Utilizing VirtualBox 6.0.8 for guest VMs.

My Cuckoo version and operating system are: 2.0.7 on Ubuntu Server 18.04

This can be reproduced by: Attempting remote control via guac in the Cuckoo Web interface.

The log, error, files etc can be found at: I cannot locate any errors indicating problems with guacd in logs from cuckoo or anywhere in syslog.

After upgrading to 2.0.7 I cannot get guacd remote control to work and only receive the static screen with "An error occured". I have since built a second instance from scratch (No reused configs, guest instances, or resources) and I am still experiencing this problem with 2.0.7. I will be happy to provide logs, but I am honestly unsure which logs to provide as I could not find anything from cuckoo or in syslog that indicate problems with guacd or the remote control feature. Attached are all applicable config files for my deployment. I'm a bit out of ideas on how to resolve this issue so any advice or ideas are greatly appreciated.
conf.zip

[RicoVZ]

Hi tcannon9132,

Thanks for posting an issue.

We recently found this out and are aware of it. We are looking into solving this issue.

[leniwiec16]

Same here on Ubuntu Desktop 18.04 and KVM.

[ne1llee]

I have temporarily closed the CSRF authentication of the two interfaces:
api/tasks/info
analysis/control/tunnel

[tcannon9132]

ne1llee's solution resolves this issue with Guacd. File location is /usr/local/lib/python2.7/dist-packages/cuckoo/web/analysis/urls.py.

[tcannon9132]

@micscoob Edit /usr/local/lib/python2.7/dist-packages/cuckoo/web/analysis/urls.py to reflect the changes listed above by ne1llee's post (comment out what is in red and add what is in green)and restart. No other changes are needed.

[micscoob]

Worked like a charm! Thanks.

[leniwiec16]

Is it fair to call it a fix? Sounds more like a workaround to me. Doesn't it introduce some CSRF vulnerabilities?

[1earch]

In my mind, duplicate of #2720
And a PR is developed but not working for now, I think: #2721