implement / fix windows native compatibility about bettercap HOT 15 CLOSED

Unfortunately it looks like port redirection with netsh is not possible, this doesn't work as expected as it just creates a local listener which redirects to 8080 but does not work on forwarded packets ... help ?

from bettercap.

mmm nope i did not, i will try to see if that changes anything, thanks

from bettercap.

From a conversation in our dev channel:

as u can see from the code i'm succesfully enabling incoming traffic on those ports
i also enabled routing with regedit
everything works, problem is:
that port redirection is fake
well, not fake fake, but it's basically a socks proxy tunnelling from ip A to ip B
so it does not forward connections at the packet level, like iptables does on linux
which is what we'd need in order for the proxy to work

from bettercap.

They are basically the same command, one set via netsh and one via the registry. REF.

from bettercap.

So this should work, you have to have ipv6 libraries installed with netsh int ipv6 install and then use netsh interface portproxy add v4tov4 listenport=<localport> listenaddress=<localaddress> connectport=<destport> connectaddress=<destaddress>. It does create a local listener on the local port and forwards it to the dest port. Would you be able to explain a little more on what you mean by it "does not work on forwarded packets"?

from bettercap.

because it just creates a listener at application layer

from bettercap.

Just in case, did you add the rule to allow the incoming port?

netsh advfirewall firewall add rule name=”BetterCap-Ng” protocol=TCP dir=in localip=x.x.x.x localport=xxxx action=allow

from bettercap.

Good write up from someone who apparently has been here already :) http://woshub.com/port-forwarding-in-windows/

from bettercap.

@NxxN39 added the firewall rule to enable the port, which is working ( I can connect to the box port 80 which is redirected to 8080 ), but it's not routing others' connections

from bettercap.

Is routing enabled on your machine? I remember a specific reg key has to be enabled to turn on routing on some versions of win. Which one are you using?

from bettercap.

Yes I enabled routing via regedit ( \HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\IPEnableRouter -> 0x00000001 ).

from bettercap.

using windows 10

from bettercap.

Also this should enable forwarding too.

from bettercap.

Efforts are being made on this branch, removing from first milestone for now.

from bettercap.

Closing this issue as port forwarding is just not supported on Windows at the firewall level like it is on other OS, userland packet routing is needed which makes everything slow as hell.

from bettercap.