RAT, port forwarding and shit

What's the best way to setup a home network? Why should I care about BGP?

RAT, port forwarding and shit

Post by Flandria4 on Sun Sep 30, 2012 3:16 pm
([msg=69822]see RAT, port forwarding and shit[/msg])

Hi there!

Me and my friend are testing an old RAT (poison ivy). Since I initially don't really trust any virus related stuff, I decided to set up the 'server' of the RAT on my virtual machine.

Everything OK and well, but.. then I had to give in my IP adress & port. I tried hunderds of things, even my internal IP (from virtualbox), since I figgured that my VM and host pc have the same external IP. Well, when that didn't work out I did some intern port forwarding in my network settings of the virtual machine and after eventually wasting 2 hours of my life I just quit the whole project.

Now we picked it up again and I'm less afraid to set the RAT up on my PC without VM. I thought it would be a lot easier without all these extra's but I'm clearly wrong. When I test the connection (on myself) it doesn't work. So obviously it won't work for others either. My friend doesn't use any anti-virus and it didn't work out for him either, even after he bought a new router. (no not solely for this ;))

This is my current setup:
Image


And this is my router:
(full img: http://i.imgur.com/5KBrD.png)
Image


I tried more that just port 4444... but I have no clue why it doesn't works.
Image



Can somebody help me?


Many thanks


By the way, I'm NOT doing anything illegal, me and my friend are trying to learn something here.
Flandria4
New User
New User
 
Posts: 2
Joined: Sun Sep 30, 2012 2:48 pm
Blog: View Blog (0)


Re: RAT, port forwarding and shit

Post by limdis on Sun Sep 30, 2012 7:08 pm
([msg=69826]see Re: RAT, port forwarding and shit[/msg])

Do you have a firewall running? Such as windows firewall or any kind of AV running? Due to the age I'm sure that this will most certainly be blocked.
"The quieter you become, the more you are able to hear..."
"Drink all the booze, hack all the things."
User avatar
limdis
Moderator
Moderator
 
Posts: 1319
Joined: Mon Jun 28, 2010 5:45 pm
Blog: View Blog (0)


Re: RAT, port forwarding and shit

Post by Flandria4 on Mon Oct 01, 2012 1:22 pm
([msg=69828]see Re: RAT, port forwarding and shit[/msg])

Yes, I have both my AV and firewall completely disabled. Even before, when that wasn't the case I made sure it was trusted with both programs.
Flandria4
New User
New User
 
Posts: 2
Joined: Sun Sep 30, 2012 2:48 pm
Blog: View Blog (0)


Re: RAT, port forwarding and shit

Post by FunctionCreep on Sat Oct 06, 2012 2:40 pm
([msg=69977]see Re: RAT, port forwarding and shit[/msg])

Hi,

Use http://www.canyouseeme.org/ and check if an outside machine can actually connect to your IP and port that your RAT is listening on.

If that is not the case:

1)PC firewall is blocking it. Antivirus not completely shutdown (this isn't unheard off)
2)No-ip set to redirect to port 80 rather than use proper DNS entries
3)Router firewall is blocking it.
4)Port forwarding is incorrectly set.
5)NAT is incorrectly configured.
6)ISP actually blocking some port ranges.

Let us know how it turns out 8-)
"I hope for nothing. I fear nothing. I am free." ~ Nikos Kazantzakis
User avatar
FunctionCreep
Experienced User
Experienced User
 
Posts: 92
Joined: Tue May 18, 2010 6:19 pm
Blog: View Blog (0)



Return to Networking

Who is online

Users browsing this forum: No registered users and 0 guests