Reverse SSH Tunneling

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 style="box-sizing: border-box; font-family: Raleway, Helvetica, Arial, sans-serif; font-size: 33px; line-height: 46px; margin: 0px 0px 8px;"> <u><span style="color: #990000;">Reverse SSH Tunneling</span></u></h1> <div> <span style="color: #333333; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this tutorial we will covering how to bypass these restrictions using a technique called Rerverse SSH Tunneling.</span></span></div> <div> <span style="color: red; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Note: This tutorial assumes you are using <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu</a>. The steps however are expected to work for other Linux distribution.</span></span></div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3dFwWxIAlnnoDhDUBOag_ZQ0mYlSo6eEfDyfC6CSSbfYnV4vavMfV_dS1L6uUBQxUwyIVqx0i1e4LxGzT3iQcRrilQ_b4IjjV7pAxmi5soqSqVrL4KPZSCqWMH0ERC4mC2gXzXY2s6dFT/s1600/ssh-hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3dFwWxIAlnnoDhDUBOag_ZQ0mYlSo6eEfDyfC6CSSbfYnV4vavMfV_dS1L6uUBQxUwyIVqx0i1e4LxGzT3iQcRrilQ_b4IjjV7pAxmi5soqSqVrL4KPZSCqWMH0ERC4mC2gXzXY2s6dFT/s1600/ssh-hackthesec.co.in.jpg" /></a></div> <div> <span style="color: red; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><br /></span></span></div> <div> <div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"> <b><span style="color: #0b5394;"><u>Prerequisites:</u></span></b></div> <div> <ul style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px; text-align: left;"> <li>An Ubuntu server instance.</li> <li>A SSH Client on your local machine.</li> </ul> <div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;"><b><u><span style="color: #0b5394;">Step 1: Configuring SSH daemon on your server:</span></u></b></span></div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;">By default, <a href="http://www.hackthesec.co.in/search/label/SSH">SSH </a>daemon is only listening on <span style="color: red;">127.0.0.1</span>, so we won’t be able to access to our forwarded ports from outside. To get it listen on the interface connected to Internet we must enable <span style="color: red;">GatewayPorts </span>option in <a href="http://www.hackthesec.co.in/search/label/SSH">SSH </a>server's configuration.</span></div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;"><br /></span></div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;">Open <b>/etc/ssh/sshd_config</b> using your favorite text editor.</span></div> <div> <pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">nano /etc/ssh/sshd_config</span></span></pre> </div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;">Then add <b><span style="color: red;">GatewayPorts yes</span></b> at the bottom of the file.</span></div> <div style="font-family: verdana, geneva, sans-serif;"> <span style="font-size: 15px; line-height: 26px;">After saving the file, restart the SSH daemon:</span></div> <div> <pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">service ssh restart</span></span></pre> </div> </div> </div> <div> <div> <span style="color: #0b5394; font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;"><b><u>Step 2: Tunneling:</u></b></span></span></div> <div> <span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">If your home computer runs Linux, you’ll need to use the ssh command as follows:</span></span></div> </div> <div> <pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">ssh -R [Port to forward to on your VPS]:localhost:[Port to forward on your local machine] [VPS IP]</span></span></pre> </div> <div> <span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">Or if you have installed Microsoft Windows on your machine then you have to install <a href="http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html">plink</a> and connect as shows below:</span></span></div> <div> <pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">plink -R [Port to forward to on your VPS]:localhost:[Port to forward on your local machine] [VPS IP]</span></span></pre> </div> <div> <span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">In this example, we’re forwarding port <b>19132</b> which is open on your at-home machine to port <b>80 </b>on your remote server (assuming your server's IP Address is <b>192.168.0.1</b>).</span></span></div> <div> <pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-size: large;"><span style="line-height: 20.8px;">ssh -R 80:localhost:19132 192.168.0.1</span></span></pre> </div> <div> <span style="font-family: verdana, geneva, sans-serif;"><span style="font-size: 15px; line-height: 26px;">This will allow you to access your at-home machine from a remote location by connecting to <b>192.168.0.1:80</b></span></span></div> <div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;"> <a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div> </div> </div>

Reverse SSH Tunneling

Reverse SSH Tunneling In this tutorial we will covering how to bypass these restrictions using a technique called Rerverse SSH Tunneling...

Read more »