+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Encrypt traffic between server and client (/showthread.php?tid=5995619)
Encrypt traffic between server and client - RedFishTeam8 - Aug 2, 2019
Hey, How you can encrypt traffic like SSL, Proxy or a tunnel for a RAT or something that u don't have access to source code. For example you want to encrypt the traffic of OzoneRat, Not just for bypassing av also for some tools without traffic encryption this is needed.
I used some tunneling tools and none of them worked correctly. Am i wrong?
RE: Encrypt traffic between server and client - Madam - Aug 2, 2019
it is fully possible. Stunnel would do encrypt all of tcp traffic from server to client. it can apply to all types of RAT.
RE: Encrypt traffic between server and client - RedFishTeam8 - Aug 3, 2019
(Aug 2, 2019 11:58 PM)madam Wrote: it is fully possible. Stunnel would do encrypt all of tcp traffic from server to client. it can apply to all types of RAT.
Thank u. I used Chisel, Gotunnel, Gost and GhostTunnel on # and quasar but non of them fully works.
Traffic goes like this:
QuasarAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> QuasarServer
1: (OK)
2: (OK)
3: (OK)
4: (fails)
I turned Firewall/AV OFF in both sides.
RE: Encrypt traffic between server and client - Madam - Aug 3, 2019
(Aug 3, 2019 02:07 AM)RedFishTeam8 Wrote: Thank u. I used Chisel, Gotunnel, Gost and GhostTunnel on # and quasar but non of them fully works.
Traffic goes like this:
QuasarAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> QuasarServer
1: (OK)
2: (OK)
3: (OK)
4: (fails)
I turned Firewall/AV OFF in both sides.
OK.
Stunnel will give you excellent result.
Good luck.
RE: Encrypt traffic between server and client - gogreendv - Aug 3, 2019
(Aug 3, 2019 06:43 AM)Madam Wrote: OK.
Stunnel will give you excellent result.
Good luck.
You are right.
But he seems to have done something wrong.
It seems like the last thing wrong with the Sturnnels.
Thank you.
RE: Encrypt traffic between server and client - RedFishTeam8 - Aug 4, 2019
(Aug 3, 2019 06:49 AM)gogreendv Wrote: You are right.
But he seems to have done something wrong.
It seems like the last thing wrong with the Sturnnels.
Thank you.
(Aug 3, 2019 06:43 AM)Madam Wrote: OK.
Stunnel will give you excellent result.
Good luck.
Sorry but the same thing happend with Stunnell:
Client log:
2019.08.04 19:21:02 LOG5[89]: Service [rem] accepted connection from 127.0.0.1:2496
2019.08.04 19:21:02 LOG5[89]: s_connect: connected 192.168.111.6:10000
2019.08.04 19:21:02 LOG5[89]: Service [rem] connected remote server from 192.168.111.3:2497
2019.08.04 19:21:02 LOG3[89]: SSL_connect: Peer suddenly disconnected
2019.08.04 19:21:02 LOG5[89]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
Server log:
2019.08.04 19:21:02 LOG5[14]: Service [rem] accepted connection from 192.168.111.3:2497
2019.08.04 19:21:02 LOG5[14]: s_connect: connected 127.0.0.1:2404
2019.08.04 19:21:02 LOG5[14]: Service [rem] connected remote server from 127.0.0.1:49342
2019.08.04 19:21:02 LOG3[14]: SSL_connect: Peer suddenly disconnected
2019.08.04 19:21:02 LOG5[14]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
-----------------
RemcosAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> RemcosServer
1: (OK)
2: (OK)
3: (OK)
4: (fails)
I turned Firewall/AV OFF in both sides.
Thank yall. I fixed the config file then reload. And now the traffic is encrypted 🤗 🤗 🤗 🎉 👍
RE: Encrypt traffic between server and client - gogreendv - Aug 4, 2019
congratulations.
Good luck for you.