command-line reverse connection tunnel?

From: Nick Jacobsen (nick@ethicsdesign.com)
Date: 12/20/02

  • Next message: C-Foo: "Re: Re-opening an old thread: NetWare-Enterprise-Web-Server/5.1 --As sistence requested."
    From: "Nick Jacobsen" <nick@ethicsdesign.com>
    To: <pen-test@securityfocus.com>
    Date: Thu, 19 Dec 2002 18:07:57 -0800
    
    

    As to the subject, I don't know how else to describe what I need in simple
    words :)

    I am hoping one of you might have an idea on how to implement the following,
    keeping in mind that everything MUST be done using a command-line only. I
    have a machine ("SERVER1") behind a firewall that lets in only port 80, on
    which there is an HTTP server, but lets out all traffic. I need to connect
    my machine ("CLIENT") to that server's Remote Desktop, which runs on port
    3389. I have command line access to the remote machine by sending a reverse
    command prompt. So, the question is, what tools are out there that would
    let me create a tunnel as follows:

    SERVER1 ----> CLIENT1(port whatever) <---- CLIENT1(Listener port 3389)
    CLIENT1(RDP client program) -----> CLIENT1(port 3389) <- Existing Pipe ->
    SERVER1(port 3389)

    To explain, I need a program on SERVER1 that creates a connection to
    CLIENT1. the connection that is created to CLIENT1 then needs to listen on
    port 3389. When CLIENT1 recieves a connection, it needs to pass it through
    the existing pipe, and SERVER1 needs to connect to itself on port 3389.

    Sort of confusing, I know, and any other suggestions would be welcome, with
    the stipulation that, again, SERVER1 can only accept outside connections
    from port 80, but can make connection to any computer.

    Thanks,
    Nick Jacobsen
    Ethics Design
    nick@ethicsdesign.com

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/



    Relevant Pages

    • Re: command-line reverse connection tunnel?
      ... I wrote a suite of Tcl scripts to accomplish this goal a few years ago, it has been listed on SecurityFocus for a long time as reverseutils. ... >have a machine behind a firewall that lets in only port 80, ... I need a program on SERVER1 that creates a connection to ... and SERVER1 needs to connect to itself on port 3389. ...
      (Pen-Test)
    • RE: Serial Connection Password Cracker.
      ... This is a tcp socket server that redirects all I/O to a serial port. ... > Subject: Re: Serial Connection Password Cracker. ... >> This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: command-line reverse connection tunnel?
      ... Use fpipe from www.foundstone.com to redirect traffic on the server to ... another port on the same machine: ... I need a program on SERVER1 that creates a connection to ... >This list is provided by the SecurityFocus Security Intelligence Alert ...
      (Pen-Test)
    • Re: command-line reverse connection tunnel?
      ... I need a program on SERVER1 that creates a connection to ... the connection that is created to CLIENT1 then needs to listen on ... and SERVER1 needs to connect to itself on port 3389. ...
      (Pen-Test)
    • Re: Correction
      ... Normally to physically disconnect is just a matter of reaching for the ... >> I have an ADSL connection which polls my computer from time to time, ... > disallow each and every port with Windows Firewall? ...
      (microsoft.public.windowsxp.messenger)

  • Quantcast