Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 33 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow private ip
EH-Net
May 25, 2013, 01:34:20 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: private ip  (Read 3316 times)
0 Members and 1 Guest are viewing this topic.
massino
Newbie
*
Offline Offline

Posts: 3


View Profile
« on: February 17, 2011, 07:46:35 AM »

hie i need help how can i use a payload like bind_tcp or reverse_tcp when i am on a private_ip as my isp assigns private_ips

regards
Logged
anoninde
Guest
« Reply #1 on: February 17, 2011, 11:44:00 AM »

When you say "private" are you referring to a non-routable IP? Are you also asking this because you would like a callback coming back to your listener that is located on this "private" IP? I can only assume that this is for testing purposes, is that correct?
Logged
massino
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #2 on: February 17, 2011, 04:46:15 PM »

hi
Yes i am referring to non-routable ip and would callback coming back to your listener.

this is only for testing

regards
Logged
xXxKrisxXx
Hero Member
*****
Offline Offline

Posts: 512



View Profile
« Reply #3 on: February 17, 2011, 05:56:11 PM »

In your situation, I think you may be in need of port-forwarding. You would essentially set your LHOST to your non-routable IP Address, and note your LHOST and LPORT values which you'll be catching the payload on (Assuming a reverse connection type scenario). You'll need to login to your Router / NAT device and locate the port forwarding section and forward the LHOST and LPORT that you'll be catching the reverse connection on.

Lets say my non-route able IP address is 192.168.0.100 and my WAN IP is 300.400.300.400 (Hypothetically here folks - as if this is even possible anyway). You've created a meterpreter backdoor which utilizes a reverse connection payload, you'll set up that meterpreter backdoor to connect back to your WAP IP (Assigned by your ISP), on the given port. You'll configure port- forwarding up and allow the given port to be forwarded for 192.168.0.100 which is listening for connections as you specified.

In a bind scenario, their machine would listen on a given port and you would be able to connect to it. Their NAT device may interfere here if they have one setup because to connect to a certain port that isn't forwarded from the outside - a nmap scan on the port that may be open, may cause the results to look filtered if this device is in play.

This is a small piece of reason why the preferences are reverse-based vs bind-based in these type of attack situations. Toy around with it and if you have questions feel free to ask. Above is my understanding of it, if I'm wrong someone feel free to correct me!

-Kris
Logged

eCPPT, GCIH, OSCP, OSWP
massino
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #4 on: February 18, 2011, 01:37:39 AM »

Thanx Kris
I am using an EVDO wireless CDMA card so that means i have no Router / NAT device.Is there a workaround in that scenario?

regards
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.08 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.