Author |
Message |
mail2345
Joined: Tue Nov 06, 2007 6:58 am Posts: 2054
|
Need a way to disguise SSH traffic as HTTP traffic.
So apparently my school does a brief scan on packets. It lets SSL though, but notices SSH traffic on port 80. I'm trying to bypass the filter for IRC and other apps besides the web.
Any ideas?
|
Wed Sep 02, 2009 8:48 am |
|
|
Ophanim
Joined: Wed Dec 26, 2007 6:33 am Posts: 1743 Location: Trapped in UCP. Send help.
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
IRC uses SSL why do you need SSH.
|
Wed Sep 02, 2009 11:20 am |
|
|
MacAnkka
Joined: Thu May 14, 2009 8:44 am Posts: 29 Location: Finland
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
You could try Telnet, the filter might let it through. Unofrtunately it isn't very secure (at all). A quick google shows something like this, though: http://linux.about.com/cs/linux101/g/telnetssl.htmSSL-secured telnet. You'd need to install it on both the server and client, though, so you need to have access to both of them (so if you are using a public linux shell or something like that, it might not work for you).
|
Wed Sep 02, 2009 4:09 pm |
|
|
ProjektTHOR
Banned
Joined: Tue Feb 27, 2007 4:05 pm Posts: 2527
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
The school likely doesn't use DPI to block SSH, it likely just blocks all outgoing packets on port 80. Create an SSH tunnel to an external machine on a port that isn't a commonly used port.
|
Wed Sep 02, 2009 6:53 pm |
|
|
mail2345
Joined: Tue Nov 06, 2007 6:58 am Posts: 2054
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
THOR's idea does not work, TT, the system blocks known IRC ports, and I am not gonna have my computer raped by a bunch of script kiddies with packet sniffers.
|
Mon Sep 07, 2009 12:44 am |
|
|
robowurmz
Joined: Thu Aug 16, 2007 10:09 am Posts: 163
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
Proxy, or HTTP Tunnelling. Both are very effective.
EDIT: And by "Proxy" I don't mean those cruddy websites that you browse with, I mean actually using a proxy server to connect to the net. There's guides online on how to set up a home pc for use as a proxy server.
|
Mon Sep 07, 2009 10:28 am |
|
|
ProjektTHOR
Banned
Joined: Tue Feb 27, 2007 4:05 pm Posts: 2527
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
There's no reason an SSH tunnel shouldn't work. http://www.techimo.com/forum/networking ... h-irc.htmlI shoudn't have to tell you to google this ♥♥♥♥.
|
Mon Sep 07, 2009 1:36 pm |
|
|
mail2345
Joined: Tue Nov 06, 2007 6:58 am Posts: 2054
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
I know how to make an SSH tunnel, it's just that the filter blocks the SSH tunnel.
The filter detects proxy protocols as well(SOCKS and the like).
|
Mon Sep 07, 2009 6:11 pm |
|
|
ProjektTHOR
Banned
Joined: Tue Feb 27, 2007 4:05 pm Posts: 2527
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
Then use another port for the tunnel? SSH tunnels do not require a specific port. There is almost zero chance your institution is using Deep Packet Inspection to block SSH traffic based on packet content. They are just blanket blocking ports.
Keep randomizing ports until you find one.
ssh -l user -L port:server.tld:port server.tld
It's not that hard. If one port doesn't work try ♥♥♥♥.
|
Tue Sep 08, 2009 2:34 pm |
|
|
mail2345
Joined: Tue Nov 06, 2007 6:58 am Posts: 2054
|
Re: Need a way to disguise SSH traffic as HTTP traffic.
ProjektTHOR wrote: it likely just blocks all outgoing packets on port 80 Just realized no, it is open.
|
Tue Sep 15, 2009 4:51 am |
|
|
|