[StudentBeginer]

Hello everyone,

I'm working on a project and I need to implement a reverse shell from a victim machine to my attack machine, but I want to do it without exposing my public IP. I have been considering several options, but I would like to know what approaches could be the most effective.

[tsuchigumo]

Make it from a VPS 'machine' so the exposed IP is from there, anyways use VPN to connect to the VPS. Your VPS is going now to be the " attacker machine" .

[StudentBeginer]

The question is whether there is another way without having to spend money.

[tsuchigumo]

The question is whether there is another way without having to spend money.

The short answer for that is NO. You would have to buy VPS / VPN , any free option is NOT an option.

[svidetelstvo]

well, there are actually some option 'was' existed, but not now.
for example http reverse shell over tor; but now they are not working because there are no available tor2web service anymore.
if you can include little-t-tor in payload then you can still use this way but it's not worth to do that due to most of case payload size is very limited and it's likely detected.

[StudentBeginer]

One question guys and if I create a vpn with openvpn to be specific for the reverse shell? is the most feasible option that comes to my head as openvpn I use it when I want to hack a hackthebox machine.

[tsuchigumo]

One question guys and if I create a vpn with openvpn to be specific for the reverse shell? is the most feasible option that comes to my head as openvpn I use it when I want to hack a hackthebox machine.

Well your ass might be fedded to be honest. "Open VPN" usually have "exit node" on a cybersecurity company, such as "anonsurf" or even Tor itself. Idon't know, you should use mullvad VPN as minimum.

> mullvad.net

* DO NOT USE FREE VPN

[StudentBeginer]

A well, then if or if I have to spend money xD.

Thanks for clarifying some things for me guys and girls.