HTTP Tunneling

[tyronmiller at gmail.com (Ty Miller)]

Cool, thanks. I had a read through. Its not 100% clear as to how the calls
support authentication even though it talks about some settings, but no
probs.

I was just going by Skape's paper "Understanding Windows Shellcode" in the
"Download/Execute" section where he says;

"It can even work through a pre-configured proxy given that said proxy does
not require authentication information."

In this paper he uses WinInet calls too.

Thanks again,
Ty


On Sun, Jun 29, 2008 at 3:21 PM, H D Moore <hdm at metasploit.com> wrote:

> It calls WinInet's URL API, which I believe that takes advantage of some
> settings. See the following docs:
>
> http://msdn.microsoft.com/en-us/library/aa384220(VS.85).aspx<http://msdn.microsoft.com/en-us/library/aa384220%28VS.85%29.aspx>
>
> -HD
>
> On Sunday 29 June 2008, Ty Miller wrote:
> > download_exec won't support authenticated proxies though, will it?
>
>
> _______________________________________________
> http://spool.metasploit.com/mailman/listinfo/framework
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20080629/2a4db630/attachment.htm>