Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 39 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow CEH - Certified Ethical Hackerarrow how to penetrate pc through NAT ??
EH-Net
May 20, 2013, 12:49:31 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 2 [3]   Go Down
  Print  
Author Topic: how to penetrate pc through NAT ??  (Read 27596 times)
0 Members and 1 Guest are viewing this topic.
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #30 on: May 18, 2010, 07:24:11 AM »

Your router has two interface- external and internal. Each interface has a separate I.P address. When you use 'ipconfig', the I.P address of the default gateway you see there is its I.P address for your INTERNAL network. This address is not routable on the internet. Even my router can have the same internal I.P address as your router and we'll be able to communicate.

What the world sees is the I.P address of the external interface of your router. This I.P address is your unique I.P address on the internet. It's the one that's used when some other system wants to connect to you.

So in this case set LHOST to 41.x.x.x and forward LPORT from your router to your 10.0.0.167 machine.

I don't think that your I.P address basics are weak...it's just that they aren't strong Grin. Reading a IPv4 chapter from a good book will make your concepts clear.
Logged
rebrov
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #31 on: May 18, 2010, 07:32:22 AM »

Your router has two interface- external and internal. Each interface has a separate I.P address. When you use 'ipconfig', the I.P address of the default gateway you see there is its I.P address for your INTERNAL network. This address is not routable on the internet. Even my router can have the same internal I.P address as your router and we'll be able to communicate.

What the world sees is the I.P address of the external interface of your router. This I.P address is your unique I.P address on the internet. It's the one that's used when some other system wants to connect to you.

So in this case set LHOST to 41.x.x.x and forward LPORT from your router to your 10.0.0.167 machine.

I don't think that your I.P address basics are weak...it's just that they aren't strong Grin. Reading a IPv4 chapter from a good book will make your concepts clear.

well Smiley i already said i've taken CCNA course im at level 4 now Smiley

dun have to read ipv4 again :S studied it already at the 1st level

those levels that i already got Certificate on :

1-Network Fundamentals

2-Routing Protocols and Concepts

3-LAN Switching and Wireless

still need to pass the : 4-Accessing the WAN course

so i can go for the final CCNA exam Smiley

but whats make my info kinda weak that i didn't follow lvl 1  when i finish lvl i go for next and dont practice for the earlier lvls Smiley

thanks mate anyway
« Last Edit: May 19, 2010, 05:32:40 AM by rebrov » Logged
rebrov
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #32 on: May 19, 2010, 05:36:56 AM »

another question : if i dont have access to the router and i specified port 8080

as LPORT and as LHOST i assigned my WAN external ip


now when the reverse connection back again to my router which local ip will choose to pass the traffic !!!! because i think that all Lan ips should have port 80 open and allowed for incoming traffic from outside

second question what if i opened port and forwarded it to my local ip

and i did the same port to another ip !! ?

what should be happen ?

the router will flood the frame ( broadcast ) to all local ips except the one came from and when my ip gets the frame while im at handler listener mode i will receive it ??



what do u think ??
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #33 on: May 19, 2010, 07:46:29 AM »

Quote
another question : if i dont have access to the router and i specified port 8080

as LPORT and as LHOST i assigned my WAN external ip


now when the reverse connection back again to my router which local ip will choose to pass the traffic !!!!  
In this case the LPORT will be your router's port and the reverse connection will try to connect to your router. You have to forward port to make a reverse connection to your ip.
Quote
because i think that all Lan ips should have port 80 open and allowed for incoming traffic from outside
Port 80 is used by web servers. If you don't have a web server in your network you don't need to allow incoming port 80. Ports from 1 to 1023 are used for well known services. Ports above 1023 are used by your client programs and are randomly selected.
So when you connect to a website your browser chooses a random port above 1023 and connects to port 80 of the website's webserver.
Your router should have all incoming ports blocked unless explicitly opened by you.
Quote
second question what if i opened port and forwarded it to my local ip

and i did the same port to another ip !! ?

what should be happen ?
You can not forward same port to multiple computers.
« Last Edit: May 19, 2010, 07:48:17 AM by Equix3n- » Logged
rebrov
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #34 on: May 19, 2010, 03:27:42 PM »

thanks alot buddy i fully understanded
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #35 on: May 19, 2010, 10:38:26 PM »

I wonder with all those exploits and scans that you're shooting, what's the state of your friend's computer Grin
« Last Edit: May 20, 2010, 12:00:42 AM by Equix3n- » Logged
Manu Zacharia (-M-)
Sr. Member
****
Offline Offline

Posts: 393


c0c0n Hacking Conference - where hackers unite


View Profile WWW
« Reply #36 on: May 20, 2010, 03:52:24 AM »

The friends computer is behind a router over which he is not having direct access (I presume). However, think about the status of his router status after all these "confused port-forwarding"  Wink
Logged

Manu Zacharia
MVP (Enterprise Security), ISLA-2010 (ISC)², C|EH, C|HFI, CCNA, MCP,
Certified ISO 27001:2005 Lead Auditor

There are 3 roads to spoil; women, gambling & hacking. The most pleasant with women, the quickest with gambling, but the surest is hacking - c0c0n
rebrov
Full Member
***
Offline Offline

Posts: 130



View Profile
« Reply #37 on: May 23, 2010, 08:37:30 AM »

The friends computer is behind a router over which he is not having direct access (I presume). However, think about the status of his router status after all these "confused port-forwarding"  Wink


ooh no when i said i tried this and test it on my friend pc my friend let me do this he accepted the nc on chatting easy and opened it he even typed the command i told him to

but to make port forward i can't since the router is mine to open thats why i can't make it work dun have access to the router that im associated to Cheesy
Logged
Pages: 1 2 [3]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.071 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.