Penetration Testing mailing list archives

Re: Pushing SSH tunnels over TELNET proxies


From: Ryan Mack <lists () mackman net>
Date: Mon, 16 Feb 2004 08:26:23 -0800 (PST)

Take a look at slirp (http://slirp.sourceforge.net/).  If it's the program
I'm thinking of, it allows you to simulate a PPP or SLIP connection
through a shell account.  You can then run SSH or another secure tunnel 
through that.

-Ryan

On Fri, 13 Feb 2004, Sekurity Wizard wrote:

Hey all,
  Trying to pen my way into a network we're testing here...and I found
an open TELNET proxy (outbound) from their network.  They believe that
since they can sniff all outbound traffic through this proxy, and log it
all...that it's not possible to "put one past 'em".  I'd like to try and
push an SSH tunnel out to our parent network through their only (besides
HTTP-proxy) way out of the network...can someone throw some advice my
way?
  Essentially, I'd like to tunnel arbitrary traffic out that SSH tunnel
to another endpoint on the 'net, and then use it as sort of a VPN I can
do what-ever I want with.

Thanks,
  Wiz

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


Current thread: