Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

why target is my ip? #588

Open
hamid0901 opened this issue Nov 2, 2024 · 2 comments
Open

why target is my ip? #588

hamid0901 opened this issue Nov 2, 2024 · 2 comments

Comments

@hamid0901
Copy link

image
image
that 192.168.219.128 is my vmware ip adress.
The proxy works well. But why is the L7 attack through the proxy directed at "me" rather than at the website? This is a clear error.
i want to know reason

@RBGAMES101
Copy link

ikd why

@DanHouseman
Copy link

Could be a few reasons:

Check your proxy

is configured to forward requests to the actual target IP or domain, rather than stopping at your VMware box’s IP. Sometimes, proxies are set to direct traffic to the IP where they receive it unless explicitly instructed otherwise.

Could have NAT or port forwarding issues.

If NAT or port forwarding isn’t properly set up, the requests might not reach the intended target. This can result in the traffic being "stuck" at the VM’s IP address. Double-check your NAT/port forwarding rules if your proxy is on the same network as your VMware instance.

Could be your firewall.

Sometimes, firewalls rules can interfere, causing requests to loop back to the origin (your VMware box) rather than being forwarded externally. Double check your firewall configurations on your proxy and VMware box. This could help identify if something is blocking the intended routing.

Mistargeting:

If your L7 request configuration is set to target 192.168.219.128 instead of the actual external website, all traffic will go there. Ensure that the destination IP or URL is explicitly set to the desired website, not the VMware IP, in your L7 attack configuration. Essentially double check an entry doesn't exist in /etc/hosts for 192.168.219.128 forumzar.com

Cloudflare misconfiguration:

Perhaps this setup is incorect given it loops back to local. Not too sure as I cant do muchj traceing through it.

I hope this helps.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants