Penetration Testing mailing list archives

Re: Re: For those interested in covert channels


From: nights.shadow () gmail com
Date: 30 Dec 2008 19:19:07 -0000

Well, it doesn't matter if it's an open port or not.  The firewall will drop the packet if it doesn't want it, but that 
doesn't mean that the packet somehow didn't get sent.

The other ways you mention have a big problem seeing as they are important parts of the packet and have been talked 
about before.  These will probably show most stateful or network analyzing security software, especially any active 
warden or network stabilizer, that illigitimate traffic is going on in the network.  This is due to the way the parts 
of the packet you modify function as to how you are going to make them function.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------


Current thread: