Collaborate Disseminate
I am practicing performing a pentest and getting stuck trying to get an interactive reverse shell from an internal machine to my attacker machine.
This is what I have done so far:
Me(attacker): 67.67.67.67 (some public ip)
… Continue reading Trying to tunnel a reverse shell out of an internal network
I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168.47.144) and the Windows VM… Continue reading Pivoting with Metasploit
I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168.47.144) and the Windows VM (192.168.128…. Continue reading Pivoting with Metasploit
In Qubes OS, is there a way to set up a FirewallVM with an Application Firewall running inside that can pop up dialogs always on top to let the user decide where to accept or not a connection?
Problems:
1) Unprivileged VM wi… Continue reading Isolated Application Firewall VM on Qubes OS
I am interested in any attack which happens trough packet header information like IP header, TCP header, DLL header etc.
Also, what kind of traffic analysis is saved by Tunneling with encryption protocols?
OK, so this Question is kinda tricky. I’m working for a Company with heavy security protocols ( and no youtube… ), and I have a Cloud VM from Google that I would like to VNC to it so I could be free.
Now what I have done a… Continue reading Tunnel everything over HTTP [on hold]
I recently created a personal use VPN on a Digital Ocean droplet using Algo VPN. As per the suggestion of the Algo VPN setup script, I went to https://whoer.net/ to see if my traffic was being routed correctly through the new… Continue reading AlgoVPN and Digital Ocean Security Concerns
My idea is to use some kind of “tunneling” (i only know DNS, SSH and ICMP) to use a hacked machine (this machine is supposed to have access to internet). So, basically I think this hacked machine will work as a proxy.
Is this… Continue reading Use a hacked client as a proxy?
I did not understand some things regarding the VPN.
How is the VPN tunnel established? My computer and the end VPN server need to exchange some info to establish a tunnel? (some kind of handshake or do I miss something?)
How VPN packet finds a way to the destination machine if the entire ip-datagram is encrypted? I understand that the packet is is encapsulated within another packet, but the source and destination IP must be the same or?
E.g. I am in a restaurant, and I connect to my corporate network via VPN.
so is: MyComp -> restaurantRouter -> internet -> routerCorp-> specific server corp
If someone between 2 routers sniffs the packets, they can see that the packet goes from restaurantRouter to routerCorp? right? Or they cannot see the full path?
If someone between MyComp and restaurantRouter sniffs the packets, what they can see? Can they see source and destination ip?
The restaurantRouter or their ISP knows that I am sending packets to routerCorp?
Does the restaurantRouter or the ISP knows the content of the packets or are they already encrypted when they reach the restaurantRouter ?
Do the packets travel same path or this has nothing to do with the tunneling?
EDIT:
By the last question I meant:
Does the VPN packets travel the same hops (different routers) between restaurantRouter and routerCorp or is just a normal packet switching travel? (because the word tunneling confuses me, and I am not sure if this means also that the packets travels the same route all the time from beginning till the end of the VPN session)
I believe the root cause for DNS tunneling is because the internal hosts are allowed to do recursive queries of external domains. For DNS tunneling to work, an internal host should be able to send queries to attacker controll… Continue reading DNS Tunneling – Mitigation