Bypassing Firewalls

[ackka]

Hi just though i would post this, these types of programs have been around for awhile but could be usefull to somebody :?<br><br>This is a program called hypertunnel, basically it allows you to put packets from ftp,telnet, virtually any internet based program, inside of http requests.&nbsp;&nbsp;The reason to do this is obvously to get around a firewall.&nbsp;&nbsp;You basically need one computer inside the firewall and the other on the outside.&nbsp;&nbsp;you then could basically circumvent a firewalls protection.&nbsp;&nbsp;If say your were trying to get access to a company or something.&nbsp;&nbsp;All you would need to do is get a remote control utilitie to work with hypertunnel, set it up on a machine inside the firewall.&nbsp;&nbsp;And you could use that remote controlled computer inside the firewall to try to break into the servers inside the firewall.&nbsp;&nbsp;You would be able to control this from outside in a safe location, like a library and do whatever you want <br><br>link to hypertunnel<br><A HREF="

http://www.nocrew.org/software/httptunnel.html"

TARGET="_new">

http://www.nocrew.org/software/httptunnel.html</A><br><A

HREF="

http://www.gnu.org/software/httptunnel/httptunnel.html"

TARGET="_new">

http://www.gnu.org/software/httptunnel/httptunnel.html</A><br><br>email

me if im wrong or you have any questions<br> <p>ackka<br><a href=mailto:tmoses@iname.com>tmoses@iname.com</a><br><a href=

http://home.cyberarmy.com/ackka>

my site</a><br>"In the beginning there was HTML, and it was good"<br>
by Nick Heinle, Designing with JavaScript<br>
<br>
<br>

 

[MasterRacker]

If this works the way Nick describes, does anyone know how to protect against it?&nbsp;&nbsp;At least it looks like you need an insider to set up the initial &quot;hole.&quot; <p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br>If everything seems to be going well: you don't have enough information.......

 

[ackka]

On a second note, i believe Real Player has also adopted a version of this code.&nbsp;&nbsp;If you are a firewall admin and trying to block real player for example, they have the option to change your transport mechanism to http.&nbsp;&nbsp;So basically you can go to all the real player servers and view their content even if your firewall admin does not want this, ex. School etc..&nbsp;&nbsp;<br><br>So basically any manufacturer who does not want there product blocked by a firewall admin can just do it this way.&nbsp;&nbsp;It would be very easy to write a version of napster or something, to tunnel its requests to the napster server in http requests, provided the napster server can take apart the http requests.<br><br>I also have no idea how to stop this, any packet filtering mechanism just sees the stuff inside of http requests and my guess is would not be able to deseminate the info from normal http traffic??????<br><br> <p>ackka<br><a href=mailto:tmoses@iname.com>tmoses@iname.com</a><br><a href=

http://home.cyberarmy.com/ackka>

my site</a><br>"Do No Harm, Leave No Tracks, Be Respectful"<br>
ICMP Summer 2000, 2600 Article<br>
<br>