I have a question. Say you've compromised a website and are trying to establish a connection back to your computer. Is using a VPN service like private internet access sufficient to hide your identify when doing so? If so, what ip address do you use as your listener? I'm assuming it'd be your spoofed ip address.
When researching about reverse connections and maintaining anonymity I've only found recommendations for using an offshore VPS to redirect traffic to your attacking machine, but can you also use a VPN service instead? Also, is there another option? Using proxies for example? There's not a ton of info out there about this. Thanks.