exploiting beyond the LAN

[pentest09]

Hi Fellaz,

I've successfully exploited various win xp machines on my lan in lab environment using SET and aurora exploit but that is locally, how can these exploitz be used against other side of router on MY remote office pcs (ie.) want to try and pentest outside the local lan, will the exploit meterpreter session come back to me on my LHOST 192.168.0.8 address even if not on the same lan. if not how can it be acheived?

Pentest office : attack machine ip 192.168.0.8 public ip 96.xx.xx.xx
Remote office different lan: victim ip 192.168.1.9 public ip 92.xx.xx.xx
MY OWN btw victim machine both owned my myself.

both ip addresses differ 92.xx.xx.xx and 96.xx.xx.xx so how to metasploit past my remote router into the lan side.

As stated I own both networks but not Pwnd yet.
Googled and not found a thing apart from changing LHOST to public ip but thats just the router isnt it?

Kind Regardz DEE

[Snayler]

want to try and pentest outside the local lan, will the exploit meterpreter session come back to me on my LHOST 192.168.0.8 address even if not on the same lan.

Obviously not. If you did that, meterpreter would try to communicate with 192.168.0.8 but on your remote office's local network. You would have to set your pentest office IP on the net and port-forward the meterpreter's port to your local IP on your pentest office's router.

As stated I own both networks but not Pwnd yet.
Googled and not found a thing apart from changing LHOST to public ip but thats just the router isnt it?

Yes, that's just the router unless you port-forward like I said above, so that the router know what to do with the incoming connection.

[pentest09]

Thanx for such a quick reply, now how would i do this?

Set meterpreter to LHOST 92.xxx.xxx.xxx my pentest public ip then forward on to 192.168.0.8, dont expect you to smoke my fags 4 me but am a little new to the exploit gear. can it be forwarded from my pentest public ip into my pentest lan and what comms if u could help would be very much appreciated.

Thanx again......

[Snayler]

Set meterpreter to LHOST 92.xxx.xxx.xxx my pentest public ip then forward on to 192.168.0.8, dont expect you to smoke my fags 4 me but am a little new to the exploit gear. can it be forwarded from my pentest public ip into my pentest lan and what comms if u could help would be very much appreciated.

The port-forward thingy is to be made in the router's configuration page, not part of the exploit itself. Google "port forwarding", you should get lots of info on this. You can also include your router's brand and model in the search.

Thanx for such a quick reply
Thanx again......

You're welcome.

[hvoc458]

even with port forwarding, you might not be able to open certain ports due to your isp. you may want to look into doing some research as to what ports your isp has blocked off.although some ports may be blocked off, you can still use netcat to listen on that specific port along with using metasploit.