Remcos | Reverse Proxy

REMCOS
Remote Control & Surveillance Software
2018 © Breaking-Security.net

---

SOCKS5 Proxy - Reverse Mode

Introduction:
The Direct Proxy mode is usually the most common, but requires the proxy server side to have the firewall and router configured to allow incoming connections.
Reverse Proxy can be used when firewall or router block incoming connections on remote machines.

Direct Proxy:
Application - Proxy Server - Internet

Reverse Proxy:
Application - Proxy Server - Proxy Client - Internet

---

Procedure:

1. BE SURE THAT PORTS USED FOR PROXY CONNECTION ARE AVAILABLE AND CORRECTLY FORWARDED

SOCKS Reverse Mode will open two ports on the local machine (the Controller side) for each proxy.

Port 1: This is the port used by applications to connect to your proxy.
Port 2: This is the port used by Remcos agent (which acts as a proxy client) to connect to the proxy server (on the C&C)


2. ACTIVATE THE REVERSE PROXY ON REMCOS

1) Right Click on Remote Host - Network Functions - SOCKS Proxy
2) Type the two ports that you want to use in Reverse SOCKS5
3) Click the Start button



---

Configure External Applications:

MOZILLA FIREFOX:
Menu - Options - Network Proxy - Manual Proxy Configuration

GOOGLE CHROME:
1) Download and install Proxy Helper plugin
2) Right Click on Proxy Helper Icon
3) Click Options