0

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options does I need to use in my payload configuration ? I've tried the usual option of LHOST = 192.168.x.x and did not work well.I'm using a payload with only two options of LPORT and LHOST and a handler with LPORT and LHOST with the same options in metasploit. (Using Kali Linux)

Any Ideas?

  • The LHOST host must be reachable by the target. – Gumbo May 9 '14 at 18:15
  • @Gumbo Can I do that with the internet? That's what I want to know – Stephenloky May 9 '14 at 18:25
  • 192.168.0.0/16 is a private block. So unless your target is in the same network as you, you can’t use that address. – Gumbo May 9 '14 at 18:27
  • @Gumbo so, which address does I need to use to make this work? or is this impossible? – Stephenloky May 9 '14 at 19:39
  • Well, your public, Internet facing address. And since you’re probably behind some router, you need to forward the LPORT as well. – Gumbo May 9 '14 at 19:40
2

The mentioned IP address 192.168.x.x is from the private network block 192.168.0.0/16. So unless your target is in the same network as you, you can’t use that address.

You need to provide an address that is reachable by the target like your public, Internet facing address. And since you’re probably behind some router, you also need to forward the LPORT on your router to your local machine.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.