As a law enforcement agent, it is advisable that you maintain anonymity throughout your command and control sessions. However, most law enforcement agencies use VPS servers for their command and control software, which is good since they introduce proxy tunnels within their endpoints. It is also another reason that law enforcement agents may not use Metasploit since it is trivial to add proxies between you and your targets.
Let's see how we can circumvent such situations and make Metasploit not only usable but a favorable choice for law enforcement. Consider the following scenario:
We can see that we have three public IPs in the plot. Our target is on 106.215.26.19, and our Metasploit instance is running on 185.91.2xx.xxx on port 8443. We can leverage the power of Metasploit here by generating a reverse HTTPS payload which offers...
