Showing posts with label tunneling. Show all posts
Showing posts with label tunneling. Show all posts
Thursday, April 12, 2012
Tunneling the Applications you launched on your Terminal with Tsocks
With some of the applications that don't have proxy configurations or settings, how can we add anonymity to our information gathering, scanning, exploiting phases, etc. like nmapping, using theharvester to gather emails, and many more? It's bad leaving your footprints and logs right?
Well if we have tsocks application then it would be easier since it can send TCP connections automatically through a SOCKS server. If tsocks is not installed on your distro, you can just find it on the software repository. In my case, BackBox Linux has tsocks pre-installed. It can be used for TORifying or tunneling your applications that doesn't have proxy capabilities. Supposed I opened a certain SSH server then binded my localhost at 9191 TCP port, I need to configure /etc/tsocks.conf to:
After configuring tsocks, try to check if tsocks is working good by using the lynx web browser to connect to a website that tells you if you are tunneled or you could also tunnel to another ssh server and issue the command w/who. Be sure to put tsocks before the command. For example:
The image below is my original IP without using ssh tunneling:
See the difference ayt!
So if I want to launch theharvester (email harvester) anonymously, I need add tsocks before theharvester command:
tsocks theharvester -d rootcon.org -l 500 -b google
Now you can run your pentesting tools with added anonymity :)
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
local = 192.168.0.0/255.255.255.0For TOR, you can just edit the server_port to 9050 because it opens a SOCKS local server at 9050 TCP port.
server = 127.0.0.1
server_type = 5
server_port = 9191
 |
| ssh -D 9191 user@hostname |
After configuring tsocks, try to check if tsocks is working good by using the lynx web browser to connect to a website that tells you if you are tunneled or you could also tunnel to another ssh server and issue the command w/who. Be sure to put tsocks before the command. For example:
tsocks lynx whatismyip.net
 |
| The IP of the SSH Server ;) |
The image below is my original IP without using ssh tunneling:
See the difference ayt!
So if I want to launch theharvester (email harvester) anonymously, I need add tsocks before theharvester command:
Now you can run your pentesting tools with added anonymity :)
About the Contributor:
Shipcode
is a prolific blogger of ROOTCON and at the same time an InfoSec
enthusiast from Cebu. He was inspired to join ROOTCON as part of the
core team to share his knowledge in information security. He encourages
other like minded individuals to come forward and share their knowledge
through blogging right here at ROOTCON Blog section.
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
Monday, February 06, 2012
SSH Tunneling with puTTy and your browser
Labels:
anonymity,
anonymous surfing,
bypass firewalls,
change IP address,
hide my ip,
puTTy,
secure shell,
SSH servers,
TCP forwarding,
tunneling
In this article we will discuss on how to tunnel using SSH / Secure Shell which can be used to hide your IP address or bypass firewalls at your school or office. SSH can also be used for forwarding TCP ports and x11 connections.
We will be using puTTy as our SSH client and it can be downloaded here. Follow this simple steps in order to cloak your IP address while you are surfing the net:
1. Run puTTy
2. Put the IP address of the SSH server that you want to use under Host name or IP Address Tab
3. Go to SSH tab >> Tunnels then put your desired port on the source port (In this example I will be using 9191 which we will soon put in the socks host port of the browser) then check Dynamic and click ADD.
4. Click Open then login with your username and password.
6. Configure your browser's network settings. Below are instructions for specific browsers that you have installed in your computer:
Mozilla Firefox: Tools > Options > Advanced > Settings > Manual proxy configuration.
Google Chrome: Options > Under the hood > Network > Change proxy settings > LAN settings > Use a proxy server > Advanced > HTTP.
Internet Explorer: Tools > Internet options > Connections > LAN settings > Use a proxy server > Advanced > HTTP.
Opera: Tools > Preferences > Advanced > Network.
7. Insert this in your socks:
Socks Host 127.0.0.1 port 9191(your desired port)
8. Click OK after you are done configuring your network settings.
Alright now we're all set! To check if you have successfully tunneled your IP address, click this. If you see the IP address of the SSH server that you put on your host then you have successfully configured your browser with your SSH server. Congratulations!
About the Contributor:
Shipcode
is a prolific blogger of ROOTCON and at the same time an InfoSec
enthusiast from Cebu. He was inspired to join ROOTCON as part of the
core team to share his knowledge in information security. He encourages
other like minded individuals to come forward and share their knowledge
through blogging right here at ROOTCON Blog section.
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
Subscribe to:
Posts (Atom)
