Penetration Testing mailing list archives
Netcat through Squid HTTP Proxy
From: Rod S <securitybasics () gmail com>
Date: Fri, 15 Apr 2005 10:40:31 -0400
Hello, I have a squid proxy server running, caching and filtering web access. User workstations on my network are only allowed http access through this proxy server. The firewall (Cisco PIX) will not let them connect outbound to any ports. I've done some testing and was successful in running netcat to connect to a remote server listening with netcat on port 80 and get a command prompt for an internal machine (which is allowed to connect to any outgoing ports) on that remote server. I'm wondering if it's possible for netcat to connect through our proxy server to a remote machine and send a cmd.exe shell in the same way? Any tips on preventing this or any other information you care to share is appreciated. Thanks! Rod
Current thread:
- Netcat through Squid HTTP Proxy Rod S (Apr 17)
- Re: Netcat through Squid HTTP Proxy Joachim Schipper (Apr 17)
- <Possible follow-ups>
- RE: Netcat through Squid HTTP Proxy Todd Towles (Apr 18)
- RE: Netcat through Squid HTTP Proxy Otero, Hernan (EDS) (Apr 19)
- RE: Netcat through Squid HTTP Proxy Henderson, Dennis K. (Apr 19)
- Re: Netcat through Squid HTTP Proxy James Kearney (Apr 19)
- Re: Netcat through Squid HTTP Proxy Chris Kuethe (Apr 19)
- RE: Netcat through Squid HTTP Proxy Todd Towles (Apr 19)
- RE: Netcat through Squid HTTP Proxy JB (Apr 22)
- RE: Netcat through Squid HTTP Proxy Todd Towles (Apr 19)