[img]http://i.imm.io/RABo.png[/img]
Since some people requested this, I've decided to give you guys a quick tutorial on how to use the Reverse Proxy feature on NetWire RAT.
I will also be spending some time on explaining the Randomization constructor, which is one of NetWire's most unique feature.
To read more about NetWire RAT, please go here.
I will also be spending some time on explaining the Randomization constructor, which is one of NetWire's most unique feature.
To read more about NetWire RAT, please go here.
What is Reverse Proxy?
In computer networks, a reverse proxy is a type of proxy server that retrieves resources on behalf of a client from one or more servers. These resources are then returned to the client as though they originated from the server itself. While a forward proxy acts as an intermediary for its (usually nearby) associated client(s) and returns to them resources accessible on the Internet, a reverse proxy acts as an intermediary for its (usually nearby) associated server(s) and only returns resources provided by those associated server(s).
[img]http://i.imm.io/RACX.png[/img]
(from http://en.wikipedia.org/wiki/Reverse_proxy)
So basically with the Reverse Proxy feature on NetWire, you will be able to use your host connection's IP address. So that means when using this feature, your browser will have the host connection's IP address.
This can be handy to bypass IP restrictions, when you are remotely controlling your servers/PC's from far away. For example a website like facebook.com has IP security, this means logging in from a different IP address will trigger alarms and ask you for security questions and whatnot. To save time and effort, we will use NetWire's Reverse Proxy feature.
What do we need for Reverse Proxy?
-In this case: NetWire RAT
-An open port
-A browser (we will be using Mozilla Firefox in this case)
Step 1: Opening and using your Port
First of all, you need an open port. So you will need to port forward a port in your router. You can do this easily with the UPNP feature on some programs like uTorrent.
But make sure you have your Windows Firewall/Router's Firewall disabled for this.
To learn how to easily open a port with uTorrent, please follow this tutorial.
Alright, once port forwarded the extra port, go to NetWire > right click your host connection > Network Utilities > Reverse Proxy
[img]http://i.imm.io/RAGm.png[/img]
Now enter the port you have forwarded in the ''Local Port'' tab and also set your maximum connections if you want to. Skip the rest and click ''Start''.
[img]http://i.imm.io/RAH6.png[/img]
Once you have pressed Start, you will see the following information. If the status is ''Listening'' then you are good to go. Press hide and continue to the next step.
[img]http://i.imm.io/RAHL.png[/img]
Step 2: Using the Proxy on your Browser and finishing off.
Go to your browser (in my case Mozilla Firefox).
Go to: Options > Advanced > Network > Settings
Once there, use the following settings (Manual Proxy Configuration and SOCKS-host). Enter localhost (127.0.0.1) and your port number. Also tick the SOCKS v5 box. Click ''Ok'' to finish.
[img]http://i.imm.io/RAKO.png[/img]
Now you are done, you can go check your IP address on www.whatismyipaddress.com to see if your IP is changed into your host connection's one.
Using the Randomization Constructor feature
What this feature basically does is using all of the host connection's IP addresses you have checked.
So if you are remotely controlling 100 of your servers/PC's, you can use one of the IP addresses from the 100 host connections each certain amount of time (set by you).
Step 1: Adding the Reverse Proxy Server
Close/stop your other running Proxy if you have used that from the previous steps and go to the ''Reverse Proxy'' tab.
Right click the empty space and press ''Add''
[img]http://i.imm.io/RANl.png[/img]
Now do the same thing as we did before, enter your open port and the amount of connections you want to use. Skip the other options. Press ''Add'' after you are done.
[img]http://i.imm.io/RANv.png[/img]
If it's successful, you will see the following in the Reverse Proxy tab:
[img]http://i.imm.io/RAOa.png[/img]
Now all the way on the bottom of the Reverse Proxy tab you will see the following options. Check them as I have done and also set the time you want.
[img]http://i.imm.io/RAOk.png[/img]
So this means each 5 seconds your IP address will change into a random one, choosing from your host connections.
Causing the following effect:
That was the tutorial, I hope you have learnt from it.
As you can see NetWire doesn't have the ''fun features'' but the necessary features. Features like these are always very handy.
If you have questions about NetWire RAT or want to see tutorial on something else, let me know by posting below.
