Re: Portscanning through HTTP proxy?

[Ron <iago () valhallalegends com>]

If you're allowing software to be running on both ends, then there's 
nothing stopping you from tunneling everything (tcp, udp, icmp, any 
other protocol you can name) through a HTTP session on port 80, which 
the proxy would almost certinaily allow. 

I'd bet there's software already made to tunnel like that, but, if not, 
all you'd really have to do is dump the raw packet, encode in base64 so 
it looks like text, and send it as a cgi request.  Anybody know of 
software that does this already? It could be handy for getting around 
proxies at work and such.

> well. Netcat does a nice job of wrapping upd with tcp. Obviously you'd
> need nc running on both ends.
>  


---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List archive: http://seclists.org