Penetration Testing mailing list archives
Re: Re: For those interested in covert channels
From: nights.shadow () gmail com
Date: 30 Dec 2008 19:19:07 -0000
Well, it doesn't matter if it's an open port or not. The firewall will drop the packet if it doesn't want it, but that doesn't mean that the packet somehow didn't get sent. The other ways you mention have a big problem seeing as they are important parts of the packet and have been talked about before. These will probably show most stateful or network analyzing security software, especially any active warden or network stabilizer, that illigitimate traffic is going on in the network. This is due to the way the parts of the packet you modify function as to how you are going to make them function. ------------------------------------------------------------------------ This list is sponsored by: Cenzic Security Trends Report from Cenzic Stay Ahead of the Hacker Curve! Get the latest Q2 2008 Trends Report now www.cenzic.com/landing/trends-report ------------------------------------------------------------------------
Current thread:
- For those interested in covert channels nights shadow (Dec 27)
- Re: For those interested in covert channels Steffen Wendzel (Dec 28)
- RE: For those interested in covert channels Abe Getchell (Dec 29)
- Re: For those interested in covert channels Dante Signal31 (Dec 30)
- <Possible follow-ups>
- Re: Re: For those interested in covert channels nights . shadow (Dec 30)