I have the following situation.

I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in msfvenom and payload option. I used reverse_tcp as my payload. till this point everything worked fine but when the victim is running the exe/apk, nothing happens.

  • Yeah, it doesn't really work like that. I would recommend learning how computer networks work, and then learning how a Tor network works. – Daniel Grover Oct 23 '17 at 19:06
  • Thank you for your recommendation. May I get any specific solution? – al mamun Oct 23 '17 at 20:25
  • 1
    The IP address you got from whatismyip was the IP of a Tor exit node. Tor exit nodes only accept connections from the Tor network. The exit node doesn't do anything with any other incoming connections; it doesn't know that the connection from your target should be associated with your Tor connection, and it has no way to let that communication be opened in reverse like that to you. – Macil Oct 23 '17 at 21:23
  • In order to receive a connection back, you would need to use a tor hidden service, which requires Tor connectivity on both client and server, and meterpreter has to use a socks5 proxy to access the tor network. Alternatively, you can use a free http to onion redirector, such as onion.to, but you can only use reverse-http(s), and on the server, you have to use a reverse proxy that filters the extraneous stuff left by the proxy, like "This is the onion.to proxy" or something like that. – Daniel Grover Oct 23 '17 at 22:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.