[RIOSMA]

As the thread subject says i can't port forward :/
It seems my ISP is blocking port connections so i did some Google digging and saw an article about Ngrok..
I want to try my R.A.T outside of my LAN since i already tested it on LAN
now i want to see if i can establish connection in WAN.
Can i use Ngrok somehow to establish the connection between the client and server?

Maybe you have an alternative i can use?
I tried contact my ISP but they won't really allow the incoming/outgoing traffic
since i've the cheapest plan available with them and i have contract i can't switch to another ISP for 1 year.

I also saw something about a VPN hosting the connection without port forward is that legit?

Thanks in advance!


|
( ͡° ͜ʖ ͡° ) |
|

[Miles Teller]

Not sure abour ngrok as I've never heard of it, but an alternative you could do is host it on a rented VPS or something (bulletproof). Obviously I am not condoning any BH activity and am providing education for you to test in a legal manner.

[DramaKing]

As the thread subject says i can't port forward :/
It seems my ISP is blocking port connections so i did some Google digging and saw an article about Ngrok..
I want to try my R.A.T outside of my LAN since i already tested it on LAN
now i want to see if i can establish connection in WAN.
Can i use Ngrok somehow to establish the connection between the client and server?

Maybe you have an alternative i can use?
I tried contact my ISP but they won't really allow the incoming/outgoing traffic
since i've the cheapest plan available with them and i have contract i can't switch to another ISP for 1 year.

I also saw something about a VPN hosting the connection without port forward is that legit?

Thanks in advance!


|
( ͡° ͜ʖ ͡° ) |
|

Do you have cellular or satellite Internet? Just want to confirm that your ISP is using CG-NAT and not doing something weird. Regardless of whether you're using the RAT for ethical testing or BH cybercrime, ngrok is not going to work for you. They monitor their network for malicious activity. They aren't likely to report you for hacking, but you will likely get banned within hours. Yes, you can use a VPN WITH port-forwarding, but it is hard to find such a VPN today. Mullvad was (I suspect) forced to discontinue port forwarding on its service.

I've started experimenting in this area, and I just got AsyncRAT working through a reverse SSH tunnel to an Oracle Cloud instance. It's still a legitimate service, but they won't know unless someone complains.

[RIOSMA]

I've got cellular internet through DSL line, i use splitter to connect router and the phone.
Funny thing is that 2 years ago approximately i had a different ISP which also blocked all ports
not only standard ones but ALL ports.. and i switched to this ISP i currently have and it's the same thing again!
It's not only about R.A.T the problem is that i'm not in control over the ports which i want to be open :)

It's definitely CGNAT, Dramaking.
Checked through the router settings even enabled DMZ

Rechecked the ports still they seem to be closed no matter what i do..

🙄🙄🙄🙄🙄

---

I've started experimenting in this area, and I just got AsyncRAT working through a reverse SSH tunnel to an Oracle Cloud instance. It's still a legitimate service, but they won't know unless someone complains.

How does this work?
Can you explain more?

[DramaKing]

I've got cellular internet through DSL line, i use splitter to connect router and the phone.
Funny thing is that 2 years ago approximately i had a different ISP which also blocked all ports
not only standard ones but ALL ports.. and i switched to this ISP i currently have and it's the same thing again!
It's not only about R.A.T the problem is that i'm not in control over the ports which i want to be open :)

It's definitely CGNAT, Dramaking.
Checked through the router settings even enabled DMZ

Rechecked the ports still they seem to be closed no matter what i do..

🙄🙄🙄🙄🙄

---

How does this work?
Can you explain more?

Cellular through DSL?? Just sounds like DSL, maybe with something like this: https://www.verizon.com/products/verizon...-extender/ Regardless, it's a bad idea to host a C2 on your public IP address.

[RIOSMA]

even better just run on rdp with open ports.

I didn't quite get this, what do you mean run in RDP with open ports

I can't open any port at all that's the problem...

That's why i think ISP is blocking traffic which kinda sucks.

[RIOSMA]

are u blind :C ? read the post.

RDP (VPS WINDOWS) YOU BASICALLY RUN UR SHIT DERE. CONNECT TO REMOTE RDP THAT HAS OPEN PORTS. ITS NOT EVEN UR ISP related.

just get frootvpn -> sweden. or setup ur own.

Never thought about that :D

I understand now mohx thank you will try this!

[aerohacker]

u can setup ngrok but i think they choose the port for u and when it changes basically u lose all client.
setting up custom vpn with ur choice of ports i think is best choice. even better just run on rdp with open ports.

alternatively u can try FrootVPN and choose sweden, they have all ports open on sweden :)

There's some VPN that allows port forwarding just one port for free and that don't choose the same?!

[DramaKing]

There's some VPN that allows port forwarding just one port for free and that don't choose the same?!

Like, no. Don't go with any free VPN. If your budget is free, you're going to be extremely limited.

---

are u blind :C ? read the post.

RDP (VPS WINDOWS) YOU BASICALLY RUN UR SHIT DERE. CONNECT TO REMOTE RDP THAT HAS OPEN PORTS. ITS NOT EVEN UR ISP related.

just get frootvpn -> sweden. or setup ur own.

OP must not know the HF lingo. He's new.

---

How does this work?
Can you explain more?

If you don't know the Secure Shell remote login protocol and OpenSSH, you need to learn. I was going to recommend pinggy.io, but it's free plan times out after an hour. opentunnel.net seems like a good, free option. There is no Terms of Service that I could find.

[RIOSMA]

I made a contact with my ISP so there was a firewall setup by them i disabled it from their website from my account
restarted the router, checked the port mapping applied changes but still services like "CanYouSeeMe" can't see my port open.
I ran Kali Linux opened Nmap with the terminal, scanned my network with my local ip even with the nmap can't see them open.
I went to Windows firewall once more restored it to default settings in case my goofball ass made some changes in the past but nope still same.

[DramaKing]

I made a contact with my ISP so there was a firewall setup by them i disabled it from their website from my account
restarted the router, checked the port mapping applied changes but still services like "CanYouSeeMe" can't see my port open.
I ran Kali Linux opened Nmap with the terminal, scanned my network with my local ip even with the nmap can't see them open.
I went to Windows firewall once more restored it to default settings in case my goofball ass made some changes in the past but nope still same.

Run a traceroute to Google or something. See if the address after your router is a public IP. You did say that you were able to use the RAT locally, right? Try adding a firewall allow rule in Windows Defender manually and run netstat to check that the RAT is listening on 0.0.0.0.

---

If everything still looks right, the next step will be looking at Wireshark captures.

[RIOSMA]

Thank you DramaKing and everyone else problem solved!

I retested it made a firewall rule to the specific port only
and this fixed the problem.
Although somehow someway when i go to CanYouSeeMe.org still it writes "Connection refused"

The connection from the server to the client works.

[DramaKing]

Good for you. It's just that clients connect to servers, not the other way 'round.

As mentioned Wireshark will show you exactly why canyouseeme.org says that the port is closed.