iExploit

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Apply for Membership

Top Posters

Who's Online (1)

Powered by Vanilla. Made with Bootstrap.
Looking to introduce yourself? Look no further, and click here! We also have IRC! [irc.evilzone.org #iexploit]
ProxyChains + Tor
  • chroniccommand
    Posts: 1,389
    I've decided to whip up a quick guide on Proxychains + Tor. What is ProxyChains? An awesome program that chains together different proxies and uses them on any program you want. This means if you want to have a chain of proxies going through nmap or metasploit or any other program, you can! As for tor, you can read more about it at http://www.torproject.org/about/overview.html.en

    Anyways, on with the tutorial. Proxychains is fairly easy and straightforward to use. I prefer it because it can be run through almost any program. This includes SSH :)

    To install it, simply type:
    sudo aptitude install proxychains

    In your terminal. Once this is done, install tor. Follow the tutorial at
    http://www.torproject.org/docs/tor-doc-unix.html.en
    This is a great tutorial for getting tor and polipo up and running on your system.

    Once you've gotten tor, polipo and proxychains, you should be ready to go.
    Step 1:
    Edit your proxychain.conf file. This is located in /etc/proxychain.conf. Just type
    sudo gedit /etc/proxychain.conf

    You can replace gedit with any file editor you choose. I prefer nano, but gedit is a good visual text editor.

    Step 2:
    Edit that bitch. On the top couple lines you'll see this:

    # The option below identifies how the ProxyList is treated.
    # only one option should be uncommented at time,
    # otherwise the last appearing option will be accepted
    #
    #dynamic_chain
    #
    # Dynamic - Each connection will be done via chained proxies
    # all proxies chained in the order as they appear in the list
    # at least one proxy must be online to play in chain
    # (dead proxies are skipped)
    # otherwise EINTR is returned to the app
    #
    strict_chain
    #
    # Strict - Each connection will be done via chained proxies
    # all proxies chained in the order as they appear in the list
    # all proxies must be online to play in chain
    # otherwise EINTR is returned to the app
    #
    #random_chain
    #
    # Random - Each connection will be done via random proxy
    # (or proxy chain, see  chain_len) from the list.
    # this option is good to test your IDS :)

    I'd recommend deleting the # in front of strict_chain, because it always works best for me. Or you can use random_chain or dynamic_chain. Their definitions are below them.

    Step3:
    Get proxies. Just go on google and search for some. ProxyChains accepts http, socks4 and socks5 proxies.
    KEEP the line that says:
    socks4     127.0.0.1 9050

    That's so it can connect to tor. Under that, just place your proxies. This is what mine looks like:

    socks4 	127.0.0.1 9050
    socks5  72.218.43.131 5033
    socks4  178.239.57.16 1080
    socks4  117.79.94.160 1080

    You can add more if you'd like. Just save and exit the editor when your done.

    Step 4:
    Run proxychains. This is easy. Just type this into your terminal:
    proxychains <program>

    For example, if I want to run proxychains through nmap:
    proxychains nmap -sS google.com

    Or metasploit:
    proxychains msfconsole


    If you want to run proxychains on SSH or something similar, you may need greater privileges. Just add sudo in front of the command and you should be able to connect to SSH through proxychains.

    --Chroniccommand
  • undead
    Posts: 822
    Nice guide. Keep up the good work. ;)
  • Bursihido
    Posts: 406
    Good Job Bro thanks :)
    EDIT: I am Learning lot of stuff from you
  • chroniccommand
    Posts: 1,389
    said:


    Good Job Bro thanks :)
    EDIT: I am Learning lot of stuff from you



    Lol thanks. I have many more tutorials planned such as wireless security with Kismet and guides on *NIX such as what to do with logs if you ever break into a *NIX system.
  • McKittrick
    Posts: 194
    last time i used proxychains, it ran incrediblly slow!
  • chroniccommand
    Posts: 1,389
    said:


    last time i used proxychains, it ran incrediblly slow!



    You had shitty proxies :P
  • _st4ck3D*
    Posts: 83
    Well done written chronic.
  • alix10
    Posts: 73
    Good tut man learned alot
  • Drevan
    Posts: 2
    Thanks for the guide, not looked into proxychains before.

    Don't really trust Tor anyway but will give proxychains a whirl :-)
  • nu11byte
    Posts: 53
    Give appropriate credits... http://forum.intern0t.net/security-tuto ... s-tor.html
  • m0rph
    Posts: 332
    said:


    Give appropriate credits... http://forum.intern0t.net/security-tuto ... s-tor.html


    ...it's the same guy...
    while( !(succeed = try() ) );
  • ir0n
    Posts: 5
    can you provide the list of some fast working proxies as well,most of the socket5 proxies are way too slow.Thanks in advance
  • Blackout
    Posts: 10
    good tutorial i use tor and this gona usefull
Add a Comment