RE: Server initiated remote shell

From: Steve (steveat_private)
Date: Fri Sep 21 2001 - 14:25:55 PDT

  • Next message: Bill Pennington: "Re: Server initiated remote shell"

    Check out the NetCat readme.  You can have it send you a shell.  Of
    course this relies on you being able to upload and execute nc on the
    host you are attacking.
    
    > -----Original Message-----
    > From: Ilici Ramirez [mailto:ilici_ramirezat_private] 
    > Sent: Friday, September 21, 2001 8:23 AM
    > To: pen-testat_private
    > Subject: Server initiated remote shell
    > 
    > 
    > Hi,
    > 
    > Lets suppose that I can execute a program on an inside
    > host on a network protected by a firewall. There is no
    > way in. But there is a way out to www browsing on port
    > 80.
    > 
    > So the client could connect to any Internet address on
    > port 80. What program should it execute to provide me
    > with a shell? Of course I'm in Internet with a
    > listener. What listener?
    > 
    > The firewall is a real statefull firewall so no TCP
    > ACK or ICMP encapsulations. 
    > 
    > Have a nice weekend too.
    > 
    > Ilici R
    > 
    > 
    > __________________________________________________
    > Terrorist Attacks on U.S. - How can you help?
    > Donate cash, emergency relief information 
    > http://dailynews.yahoo.com/fc/US/Emergency_Inf> ormation/
    > 
    > 
    > 
    > --------------------------------------------------------------
    > --------------
    > This list is provided by the SecurityFocus Security 
    > Intelligence Alert (SIA) Service. For more information on 
    > SecurityFocus' SIA service which automatically alerts you to 
    > the latest security vulnerabilities please see: 
    https://alerts.securityfocus.com/
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Fri Sep 21 2001 - 16:38:17 PDT