[RedFishTeam8]

Hey, How you can encrypt traffic like SSL, Proxy or a tunnel for a RAT or something that u don't have access to source code. For example you want to encrypt the traffic of OzoneRat, Not just for bypassing av also for some tools without traffic encryption this is needed.

I used some tunneling tools and none of them worked correctly. Am i wrong?

[Madam]

it is fully possible. Stunnel would do encrypt all of tcp traffic from server to client. it can apply to all types of RAT.

[RedFishTeam8]

it is fully possible. Stunnel would do encrypt all of tcp traffic from server to client. it can apply to all types of RAT.

Thank u. I used Chisel, Gotunnel, Gost and GhostTunnel on # and quasar but non of them fully works.

Traffic goes like this:

QuasarAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> QuasarServer

1: (OK)
2: (OK)
3: (OK)
4: (fails)

I turned Firewall/AV OFF in both sides.

[Madam]

Thank u. I used Chisel, Gotunnel, Gost and GhostTunnel on # and quasar but non of them fully works.

Traffic goes like this:

QuasarAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> QuasarServer

1: (OK)
2: (OK)
3: (OK)
4: (fails)

I turned Firewall/AV OFF in both sides.

OK.

Stunnel will give you excellent result.
Good luck.

[gogreendv]

OK.

Stunnel will give you excellent result.
Good luck.

You are right.
But he seems to have done something wrong.
It seems like the last thing wrong with the Sturnnels.
Thank you.

[RedFishTeam8]

You are right.
But he seems to have done something wrong.
It seems like the last thing wrong with the Sturnnels.
Thank you.

OK.

Stunnel will give you excellent result.
Good luck.

Sorry but the same thing happend with Stunnell:

Client log:
2019.08.04 19:21:02 LOG5[89]: Service [rem] accepted connection from 127.0.0.1:2496
2019.08.04 19:21:02 LOG5[89]: s_connect: connected 192.168.111.6:10000
2019.08.04 19:21:02 LOG5[89]: Service [rem] connected remote server from 192.168.111.3:2497
2019.08.04 19:21:02 LOG3[89]: SSL_connect: Peer suddenly disconnected
2019.08.04 19:21:02 LOG5[89]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket

Server log:
2019.08.04 19:21:02 LOG5[14]: Service [rem] accepted connection from 192.168.111.3:2497
2019.08.04 19:21:02 LOG5[14]: s_connect: connected 127.0.0.1:2404
2019.08.04 19:21:02 LOG5[14]: Service [rem] connected remote server from 127.0.0.1:49342
2019.08.04 19:21:02 LOG3[14]: SSL_connect: Peer suddenly disconnected
2019.08.04 19:21:02 LOG5[14]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket

-----------------

RemcosAgent --1--> TunnelClient --2--> || --3--> TunnelServer --4--> RemcosServer

1: (OK)
2: (OK)
3: (OK)
4: (fails)

I turned Firewall/AV OFF in both sides.

---

Thank yall. I fixed the config file then reload. And now the traffic is encrypted 🤗 🤗 🤗 🎉 👍

[gogreendv]

congratulations.
Good luck for you.