Proxychains

[snafu777]

Ladies&Gents,

Distro --> BT5R1 (Gnome)

I've a situation I'm hoping someone can provide some guidance on. With BT4R2 proxychains and firefox worked just fine together. This is not the case with BT5R1.

Last night I was attempting to use proxychains and firefox on this newest release of Backtrack when something strange happened. The command I used was

proxychains firefox

Instead of proxychains working inconjunction with firefox, it just launched firefox, that was it. No proxying of anytype occured.

I know what some of you are thinking, so let me disparge that falsehood right now. I am not using TOR.

I am using a proxy server out of Tampa for a company I am currently PenTesting for. Their firewall rules prevent access to the internal network unless you are within a certain IP address range. It just so happens that they have a very misconfigured proxy server that allows access to their internal networks. It is supposed to work inconjunction with their VPN as an "added" layer of security.

I've verified that proxychains WORKS because I am able to make connections using proxychains to the telnet/ftp/ssh servers they have running behind that firewall. The stage of the test I am currently on is trying to access their internal HTTP servers. I am able to receive output via curl and wget through the use of proxychains inconjunction with telnet/ftp/ssh, however active webbrowsing is not available to me because of the error I am having with proxychains + firefox.

I'm betting on the fact that perhaps the way in which firefox is installed or the version of firefox (5.0.1 I believe) has something to do with this whole error. I will test this tonight and report back.

Does anyone else have suggestions?


V/r,
Snafu
Pffbt..

I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me.. Or thinks I'm a smart ass..

[zimmaro]

hi, snafu
I have little experience but if you can help this
in my bt5r1 (kde or gnome) proxychains work fine! with firefox ! under TOR deamon!

root@bt:~# /etc/init.d/tor start
Raising maximum number of filedescriptors (ulimit -n) to 32768.
Starting tor daemon: tor...
Aug 27 18:07:37.569 [notice] Tor v0.2.1.30. This is experimental software. Do not rely on it for strong anonymity. (Running on Linux i686)
Aug 27 18:07:37.571 [notice] Initialized libevent version 1.4.13-stable using method epoll. Good.
Aug 27 18:07:37.572 [notice] Opening Socks listener on 127.0.0.1:9050
done.
root@bt:~# proxychains firefox
ProxyChains-3.1 (http://proxychains.sf.net)
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| www.offensive-security.com
|DNS-request| www.backtrack-linux.org
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
<><>-OK
<><>-OK
|DNS-response|: wpad is not exist
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-response| www.offensive-security.com is 208.88.120.8
<><>-OK
|DNS-response| www.backtrack-linux.org is 173.245.61.94
|DNS-response|: wpad is not exist
|DNS-request| www.whatismyip.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
|DNS-response| www.whatismyip.com is 72.233.89.198
|S-chain|-<>-127.0.0.1:9050-<><>-72.233.89.198:80-<><>-OK
|DNS-request| pagead2.googlesyndication.com
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| whatismyip.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| Google
|DNS-request| tcr.tynt.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| svlu.net
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
<><>-OK
<><>-OK
<><>-OK
bye

[raymon432]

hi, snafu
I have little experience but if you can help this
in my bt5r1 (kde or gnome) proxychains work fine! with firefox ! under TOR deamon!

root@bt:~# /etc/init.d/tor start
Raising maximum number of filedescriptors (ulimit -n) to 32768.
Starting tor daemon: tor...
Aug 27 18:07:37.569 [notice] Tor v0.2.1.30. This is experimental software. Do not rely on it for strong anonymity. (Running on Linux i686)
Aug 27 18:07:37.571 [notice] Initialized libevent version 1.4.13-stable using method epoll. Good.
Aug 27 18:07:37.572 [notice] Opening Socks listener on 127.0.0.1:9050
done.
root@bt:~# proxychains firefox
ProxyChains-3.1 (http://proxychains.sf.net)
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| www.offensive-security.com
|DNS-request| www.backtrack-linux.org
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
<><>-OK
<><>-OK
|DNS-response|: wpad is not exist
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-response| www.offensive-security.com is 208.88.120.8
<><>-OK
|DNS-response| www.backtrack-linux.org is 173.245.61.94
|DNS-response|: wpad is not exist
|DNS-request| www.whatismyip.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
|DNS-response| www.whatismyip.com is 72.233.89.198
|S-chain|-<>-127.0.0.1:9050-<><>-72.233.89.198:80-<><>-OK
|DNS-request| pagead2.googlesyndication.com
|DNS-request| wpad
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| whatismyip.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| Google
|DNS-request| tcr.tynt.com
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|DNS-request| svlu.net
|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-|S-chain|-<>-127.0.0.1:9050-<><>-4.2.2.2:53-<><>-OK
<><>-OK
<><>-OK
<><>-OK
bye

Is Tor really included in the new backtrack 5 r1 distro? I only use backtrack 5 r1 as live dvd and when I do /etc/init.d/tor start I get only the reply
No such file or directory.The same goes for privoxy.

[snafu777]

Uh....

I'm lost

hi, snafu
I have little experience but if you can help this
in my bt5r1 (kde or gnome) proxychains work fine! with firefox ! under TOR deamon!

What's yer point? Yer's works and mine doesnt?

[zimmaro]

hi,snafu777
i'm install tor under torproject repo (i'm prefer tor)
look in /etc/proxychains.conf (last line default uncomment tor 127.0.0.1 9050 or insert your parameter for your proxy)
start deamon proxy (i'm using tor)
proxychains firefox,nmap,....eccc
look in my firefox /preference/network/settings is autodetect-proxy-setting for this network!
i'm using r1 is verdad !!!)
root@bt:~# uname -a
Linux bt 2.6.39.4 #1 SMP Thu Aug 18 13:38:02 NZST 2011 i686 GNU/Linux
bye!)

[snafu777]

zimmaro,

While I appreciate the insight on TOR, I need to clarify something, so...Let me quote myself for a minute

I know what some of you are thinking, so let me disparge that falsehood right now. I am not using TOR.

I could care less about TOR

I'm trying to find the reason why proxychains just launches firefox and does not PROXY for firefox, it works with telnet, ssh, ftp, etc....

[zimmaro]

hi,
ok! as always do not understand! sorry, I thought you might be able to help! (ahaahah)
bye see you :::

[blackhawk01]

snafu777,

instead of trying to use tor + proxychains + firefox there is an easier way, and proxychains shouldn't be used with firefox. Okay when you install tor you need to
setup either privoxy or polipo to work with a web browser such as firefox. I would recommend Polipo because it works faster than privoxy, you will still have a
lag on your web browser, it just won't be as bad as privoxy. Okay so make sure that you have tor+polipo running, and just tell firefox in the advanced settings to use your polipo running at 127.0.0.1:8118 on localhost port 8118. You can verify that polipo is running with the command "netstat -ntl" make sure you see that
port 8118 running it should look like this:


Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:8118 0.0.0.0:* LISTEN


Now just add that to firefox advanced manual proxy setting or you can use the "foxyproxy" add-on if you would like. Its simple easy, and it works...

Now, please remember that if you are going to be using tor and other proxy apps to "not be and idiot" and only do things under the law.

[snafu777]

Ladies/Gents,

The solution has been found. Devs, Please close this post.

To properly run proxychains in conjunction with firefox, there must not be a currently running instance of firefox. When I was trying to use it yesterday, I already had one instance of firefox open in the background. I tried it last night with no running instances, and it worked perfectly.



V/r,
Snafu
Pffbt..

I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me.. Or thinks I'm a smart ass..