Proxychains and autorecon via chisel FYI

[Stephen McNally]

I think this is more an FYI for users who have been bashing their head against the wall trying to get proxychains autorecon to work with chisel. which I eventually got to work after failing miserably for days... including trying to get autorecon to work over sshuttle.

Posted this in the OSCP student labs
For people STRUGGLING to get autorecon through proxychains to work... this tweet from the creator is KEY BUT... in my experience even running it as non root I was getting big time stalls. The second I commented out proxy_dns in /etc/proxychains4.conf ... the tap started flowing. I verified this using wireshark and without commenting out proxy_dns ... the packets slowed to a trickle after an initial burst that just did not make sense. Commenting out, those packets are FLYING out. additional tip is that port discovery is still faster if you drop an nmap standalone binary on the pivot box to get the open ports first... then you can feed them into autorecon. example command -> proxychains autorecon --proxychains 10.1.1.27 -p T:21,22,25,80,111,135,139,445,1433,1978,1979,1980,2021,2049,2110 . after bashing my head against this for days and trying to get sshuttle to work with autorecon and failing... a chisel socks combined with what I described earlier is the way to go. I hope this saves people lots of time.