firewall penetration

Penetration learning notes-tools-firewall traversal (1) Preparations before the experiment: 1100000000h-master.zip (the ladder we used to traverse the firewall) 2. A web page of windows server firewall, a virtual machine with only port 80, is decompressed to the root directory of the website. Open the browser and enter

HTTP tunnel principle and firewall penetration method-1 TunnelMany articles are interpreted as "Tunnel" and "channel ". Tunnel is a communication method that bypasses the firewall port shielding, which can effectively shield the firewall from the port. Principle:Packets at both ends of the

Use ICMP tunneling technology for ICMP encapsulation and penetration Firewall 0x00 icmp Tunneling Technology ICMP tunneling technology, also known as Ping tunneling technology, we know that the ping protocol is icmp. When the firewall receives a protocol package, it is released by default.0x01 utilization principle and process We use the ICMP tunneling technology

HTTP tunnel principle and firewall penetration method-2 This article provides a way to establish a TCP connection through the proxy server to bypass the firewall.Generally, the firewall limits connections on many ports, but HTTP connections are still allowed (otherwise, no one can access the network ). The Protocol specifies a CONNECT request method. The client c

your own downloader, please address the following questions:1, the above code to use the remote injection method used by the function under Windows9x not.2. Windows and some applications protect certain processes and do not allow the process to operate over-privileged. such as Svchost, QQ and other processes of injection, must first carry out the right to operate.3, if you need to inject into ie. Please first use WinExec's sw_hide mode to open a hidden IE process, suspend the program for 3 seco

downloader, please address the following questions :1, the above code to use the remote injection method used by the function under Windows9x not.2. Windows and some applications protect certain processes and do not allow the process to operate over-privileged. such as Svchost, QQ and other processes of injection, must first carry out the right to operate.3, if you need to inject into ie. Please first use WinExec's sw_hide mode to open a hidden IE process, suspend the program for 3 seconds befo

Through the httptunnel technology in this article, we can see that network security is unreliable only by some or some of the following methods, at the same time, the blind dependence on the security system often causes huge security risks. It is hoped that this article will cause the Administrator to think about the network security protection system. What is an http hidden channel? What is LAN security? How can system administrators ensure LAN security? This is a changing concept of security.

Do you know how the popular P2P software and IM software allow two computers behind different firewalls to talk directly? Of course, SIP is one type, and the UDP hole Punching Technology introduced in this article is also widely used.For ease of illustration, we assume there is a network topology: IP = A. IP = 1.1.1.1Hosta ---------- firewalla --------- ||Server IP = s.s.s. s|Hostb ---------- firewallb --------- |IP = B. B. B IP = 2.2.2.2 The following conditions must be met when using this tech

A few days ago, the brothers in the Group gave a website www.111.com and asked me if I could intrude into the website.I. ClickPing www.111.com to discover timeout. It can be a firewall or a policy. then, use superscan to scan and find that there are many open ports. It is estimated that it is software _ blank "> firewall.Ii. InjectionSearch for the keyword ASP in the source file and find an injection point. when nbsi injection was used, it was found t

After understanding the concept of penetration testing, the next step is to learn the various tools used for penetration testing. Before you do penetration testing, you need to understand the tools needed to penetrate. The tools required for penetration testing are shown in table 1-1:Table 1-1 Tools required for

-compliant operators in the enterprise. The main advantage is to bypass firewall protection. The main internal penetration methods may be: remote buffer overflow, password speculation, and B/S or C/S APPLICATION TESTING (if a C/S program test is involved, prepare relevant client software for testing in advance ).Internet Test Internet testing refers to the penetration