内网渗透测试快速穿透内网指南。 – 连长 ‘s Blog

内网渗透测试快速穿透内网指南。 – 连长 ‘s Blog

[common] server_addr = 你的服务端IP server_port = 7000 tls_enable = true # true 开启 TLS 协议加密传输 启用此功能后除 xtcp 外,不需要再设置 use_encryption。 pool_count = 40 token = mytokenpasswrod [plugin_socks] type = tcp remote_port = 46075 plugin = socks5 plugin_user = allsec plugin_passwd = mysockspassword # use_encryption = true # 开启加密功能绕过防火墙 use_compression = true # 开启压塑功能 压缩算法使用 snappy # Admin UI 可以帮助用户通过浏览器来查询和管理客户端的 proxy 状态和配置。 # admin_addr = 0.0.0.0 # admin_port = 7400 # admin_user = admin # admin_pwd = admin yum groupinstall "Development tools" -y wget https://storage.googleapis.com/golang/go1.8.3.linux-amd64.tar.gz tar xzf go1.8.3.linux-amd64.tar.gz -C /usr/local mkdir /usr/local/gopackage vi /etc/profile #在profile中加入下面的环境变量,PATH如果原来就有请自行合并 GOROOT=/usr/local/go GOPATH=/usr/local/gopackage PATH=$PATH:$GOROOT/bin:$GOPATH/bin export GOROOT GOPATH PATH source /etc/profile git <span class="hljs-built_in">clone</span> https://github.com/inconshreveable/ngrok.git ngrok cd ngrok #然后我们生成下新的证书替换默认的,最后的cp选y来覆盖 NGROK_DOMAIN="ngrok.miku.one" openssl genrsa -out base.key 2048 openssl req -new -x509 -nodes -key base.key -days 10000 -subj "/CN=$NGROK_DOMAIN" -out base.pem openssl genrsa -out server.key 2048 openssl req -new -key server.key -subj "/CN=$NGROK_DOMAIN" -out server.csr openssl x509 -req -in server.csr -CA base.pem -CAkey base.key -CAcreateserial -days 10000 -out server.crt cp base.pem assets/client/tls/ngrokroot.crt make release-server release-client