Nmap Development mailing list archives

ncat tunnelling


From: Darren Martyn <darren () vps-heaven com>
Date: Mon, 04 Feb 2013 15:55:43 +0000


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,
So, I spent the last while experimenting with ncat, finding it a
suitable replacement for the original netcat. However I was wondering if
it is possible to do something rather unusual.

Lets say Host A, my internet facing server, has SSH open on port 22/TCP

Host B is behind NAT, and a firewall which only allows 53/UDP. Any UDP
packets will do.

Now, on the server side - Host A, I basically want to setup ncat as a
listener on 53/UDP, acting as a bidirectional pipe between 22/TCP and
53/UDP.

On the client side - Host B, I want to bind a listener to 1337/TCP,
acting as a proxy that sends all traffic bidirectionally over UDP to
host A (on 53/UDP).

The reasons for this should be fairly obvious, and I have been using DNS
tunnels up to now. However a "faster" solution is a UDP tunnel, and I
was wondering someone could advise me as to the correct way to get this
working with ncat.

Apologies if this is to the wrong list, I figured it would be best to
ask the people who develop the software :)
 
I have tried using | and > to pipe data, but failed miserably BTW. We
can also assume both hosts use the latest SVN versions of ncat.

Best regards,
Darren
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQEcBAEBAgAGBQJRD9n/AAoJEEqUSoN8D1Vi024H/RI6TecbGbUGWL+xKx38E3qP
y1/6CW8ZTYHAwyL/7aabfTfflbqg6nep8umtCWdcbVbOqPD0N/gXBN5ADX+4vmv/
SBfKWFgMKzb/GKBlBqUQDJfefXPh2k3dHElQaPNy8POmEjsnH5xZkVrSEnpYSrk6
GgEgXm4KHYBjN/4Igg1SNs55oYznwLebybrjHC6XzIZx9MIgIDiUTJYnTOZYMoWq
TKgNLxti1hlYYfKQG8ipHil5XQUPcvTmKMvIf7rIX/kecg0meC0Ea+6XaXq28nlj
+SkHYOXULEGNNB7Z1JDX4vPFPQeVumtE+fLTo4PF5hlKTFK+VZKvkrxIRdhKpyg=
=PyF6
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: