Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a computer with Linux BackTrack 5 as host and Windows XP as guest on virtual box. I am using Host-Only-Adapter to create virtual LAN and to share USB modem internet as well so that both host and guest are simultaneously connected to internet via single USB modem.

Since my WAN IP address dynamically changes, I am using a host-name from no-ip.com to identify my dynamic WAN IP address. With this settings I am able to get meterpreter session using windows/meterpreter/reverse_tcp_dns payload (and port 80) every time I execute payload.exe from Windows XP guest. However, when I execute payload.exe from other Windows XP computer that is on a real LAN, outside my computer, I never get meterpreter sessions. What makes me confused is that the connection is established from netstat on target computer. In this state, if I leave target computer and back to Linux server and scan it with nmap to check port 80 then it said that the port is closed (even though session was not created).

Thus:

1) Why weren't the meterpreter sessions created on Linux server while target machine (temporarily) said that connection was established and port 80 on Linux computer is closed as well? (I said temporarily because after several minutes if I check again the netstat on target computer the connection is disappear but port 80 on Linux is still closed.)

2) If server on real-LAN was block the port then why netstat on target computer said that connection was established? if ISP block the port then why I can do it from virtual box?

3) Is it port-forwarding issue? but I doubt since I only use USB dongle and I can do it on virtual box without port-forwarding.

4) Is my 3G USB broadband connection speed not fast enaugh? has anybody success using Metasploit with USB modem?

share|improve this question

I have a computer with Linux BackTrack 5 as host and Windows XP as guest on virtual box. I am using Host-Only-Adapter to create virtual LAN and to share USB modem internet as well so that both host and guest are simultaneously connected to internet via single USB modem.

Usually virtual box (Vmware or other) creates its own own virtual subnetwork, so there could be some cases when the network protocols are not working properly, for example, in some cases, nmap could not be working properly in such virtual networks. But more often everything is working fine.

Since my WAN IP address dynamically changes, I am using a host-name from no-ip.com to identify my dynamic WAN IP address. With this settings I am able to get meterpreter session using windows/meterpreter/reverse_tcp_dns payload (and port 80) every time I execute payload.exe from Windows XP guest. However, when I execute payload.exe from other Windows XP computer that is on a real LAN, outside my computer, I never get meterpreter sessions. What makes me confused is that the connection is established from netstat on target computer. In this state, if I leave target computer and back to Linux server and scan it with nmap to check port 80 then it said that the port is closed (even though session was not created).

Nearly every exploit depends on OS version, service pack and many other things, so probably some characteristics is not suitable. Check details of certain exploit.

1) Why weren't the meterpreter sessions created on Linux server while target machine (temporarily) said that connection was established and port 80 on Linux computer is closed as well? (I said temporarily because after several minutes if I check again the netstat on target computer the connection is disappear but port 80 on Linux is still closed.)

2) If server on real-LAN was block the port then why netstat on target computer said that connection was established? if ISP block the port then why I can do it from virtual box?

3) Is it port-forwarding issue? but I doubt since I only use USB dongle and I can do it on virtual box without port-forwarding.

Read the answers above.

4) Is my 3G USB broadband connection speed not fast enaugh? has anybody success using Metasploit with USB modem?

It would be ok.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.