View unanswered posts | View active topics It is currently Fri Dec 27, 2024 8:10 am



Reply to topic  [ 10 posts ] 
 Need a way to disguise SSH traffic as HTTP traffic. 
Author Message
User avatar

Joined: Tue Nov 06, 2007 6:58 am
Posts: 2054
Reply with quote
Post Need a way to disguise SSH traffic as HTTP traffic.
So apparently my school does a brief scan on packets. It lets SSL though, but notices SSH traffic on port 80. I'm trying to bypass the filter for IRC and other apps besides the web.

Any ideas?


Wed Sep 02, 2009 8:48 am
Profile
User avatar

Joined: Wed Dec 26, 2007 6:33 am
Posts: 1743
Location: Trapped in UCP. Send help.
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
IRC uses SSL why do you need SSH.


Wed Sep 02, 2009 11:20 am
Profile WWW

Joined: Thu May 14, 2009 8:44 am
Posts: 29
Location: Finland
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
You could try Telnet, the filter might let it through. Unofrtunately it isn't very secure (at all). A quick google shows something like this, though:
http://linux.about.com/cs/linux101/g/telnetssl.htm

SSL-secured telnet. You'd need to install it on both the server and client, though, so you need to have access to both of them (so if you are using a public linux shell or something like that, it might not work for you).


Wed Sep 02, 2009 4:09 pm
Profile
Banned
User avatar

Joined: Tue Feb 27, 2007 4:05 pm
Posts: 2527
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
The school likely doesn't use DPI to block SSH, it likely just blocks all outgoing packets on port 80. Create an SSH tunnel to an external machine on a port that isn't a commonly used port.


Wed Sep 02, 2009 6:53 pm
Profile YIM
User avatar

Joined: Tue Nov 06, 2007 6:58 am
Posts: 2054
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
THOR's idea does not work, TT, the system blocks known IRC ports, and I am not gonna have my computer raped by a bunch of script kiddies with packet sniffers.


Mon Sep 07, 2009 12:44 am
Profile

Joined: Thu Aug 16, 2007 10:09 am
Posts: 163
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
Proxy, or HTTP Tunnelling.
Both are very effective.

EDIT: And by "Proxy" I don't mean those cruddy websites that you browse with, I mean actually using a proxy server to connect to the net. There's guides online on how to set up a home pc for use as a proxy server.


Mon Sep 07, 2009 10:28 am
Profile
Banned
User avatar

Joined: Tue Feb 27, 2007 4:05 pm
Posts: 2527
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
There's no reason an SSH tunnel shouldn't work.

http://www.techimo.com/forum/networking ... h-irc.html

I shoudn't have to tell you to google this ♥♥♥♥.


Mon Sep 07, 2009 1:36 pm
Profile YIM
User avatar

Joined: Tue Nov 06, 2007 6:58 am
Posts: 2054
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
I know how to make an SSH tunnel, it's just that the filter blocks the SSH tunnel.

The filter detects proxy protocols as well(SOCKS and the like).


Mon Sep 07, 2009 6:11 pm
Profile
Banned
User avatar

Joined: Tue Feb 27, 2007 4:05 pm
Posts: 2527
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
Then use another port for the tunnel? SSH tunnels do not require a specific port. There is almost zero chance your institution is using Deep Packet Inspection to block SSH traffic based on packet content. They are just blanket blocking ports.

Keep randomizing ports until you find one.

ssh -l user -L port:server.tld:port server.tld

It's not that hard. If one port doesn't work try ♥♥♥♥.


Tue Sep 08, 2009 2:34 pm
Profile YIM
User avatar

Joined: Tue Nov 06, 2007 6:58 am
Posts: 2054
Reply with quote
Post Re: Need a way to disguise SSH traffic as HTTP traffic.
ProjektTHOR wrote:
it likely just blocks all outgoing packets on port 80

Just realized no, it is open.


Tue Sep 15, 2009 4:51 am
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 10 posts ] 

Who is online

Users browsing this forum: No registered users


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by STSoftware for PTF.
[ Time : 0.101s | 13 Queries | GZIP : Off ]