Re: Netcat through Proxy
From: Rod S (securitybasics_at_gmail.com)
Date: 04/14/05
- Previous message: Kelly Martin: "SF new article announcement: Introduction to Spyware Keyloggers"
- Maybe in reply to: Rod S: "Netcat through Proxy"
- Next in thread: adisegna_at_siscocorp.com: "RE: Netcat through Proxy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 14 Apr 2005 08:18:32 -0400 To: security-basics@securityfocus.com
So, it is possible to tunnel a netcat connection through a squid http
proxy server?
On 4/13/05, adisegna@siscocorp.com <adisegna@siscocorp.com> wrote:
> The pix won't provide the level of application layer filtering you would
> need to prevent this. I also use a PIX and have to deal with the same
> issue. The PIX is great for speed and preventing outside attacks but not
> inside out attacks (internal users) from open ports like http (80). I am
> now in the process testing an application layer firewall to stick behind
> the PIX to combat this problem. This will be a growing concern for
> corporations using level 3 and 4 type firewall appliances.
>
> AD
> Information Technology Group
> Security Identification Systems Corporation
>
>
> -----Original Message-----
> From: Rod S [mailto:securitybasics@gmail.com]
> Sent: Wednesday, April 13, 2005 12:00 PM
> To: security-basics@securityfocus.com
> Subject: Netcat through Proxy
>
> Hello,
>
> I have a squid proxy server running, caching and filtering web access.
> User workstations on my network are only allowed http access through
> this proxy server. The firewall (Cisco PIX) will not let them connect
> outbound to any ports.
>
> I've done some testing and was successful in running netcat to connect
> to a remote server listening with netcat on port 80 and get a command
> prompt for an internal machine (which is allowed to connect to any
> outgoing ports) on that remote server. I'm wondering if it's possible
> for netcat to connect through our proxy server to a remote machine and
> send a cmd.exe shell in the same way? Any tips on preventing this or
> any other information you care to share is appreciated.
>
> Thanks!
> Rod
>
> ------------------------------------------------------------------------
> ---
> Earn your MS in Information Security ONLINE
> Organizations worldwide are in need of highly qualified information
> security
> professionals. Norwich University is fulfilling this demand with its MS
> in
> Information Security offered online. Recognized by the NSA as an
> academically excellent program, NU offers you the opportunity to earn
> your
> degree without disrupting your home or work life.
>
> http://www.msia.norwich.edu/secfocus_en
> ------------------------------------------------------------------------
> ----
>
>
---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals. Norwich University is fulfilling this demand with its MS in
Information Security offered online. Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.
http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------
- Previous message: Kelly Martin: "SF new article announcement: Introduction to Spyware Keyloggers"
- Maybe in reply to: Rod S: "Netcat through Proxy"
- Next in thread: adisegna_at_siscocorp.com: "RE: Netcat through Proxy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
