Http-Tunnel Question

[hdm at metasploit.com (H D Moore)]

Matt Miller wrote a payload staging system that abuses Internet Explorer 
and ActiveX controls to connect back via HTTP.

$ msfpayload 2>&1| grep passivex
  win32_passivex
  win32_passivex_meterpreter
  win32_passivex_stg
  win32_passivex_vncinject

http://www.uninformed.org/?v=1&a=3&t=

-HD

On Friday 21 April 2006 00:54, Thomas Werth wrote:
> Now my question :
> Would it be easy to create a http-tunnel payload , so an attack can be
> connect back through firewall to outside and infiltrate a firm intranet
> ? Maybe with an auto-proxy setting from i.e. or similar ?
>
> Or is size for this payload to big to fit into an overflow , so only
> really spezialied hackers are able to create such hacks ?
>
> Target of my question is :
> May this vuln be exploited ( in future ) by a worm or more likley only
> a vision for a good hacker with high motivation ?
>
> Would it be possible to add such a payload into metasploit ?