| Data Realms Fan Forums http://45.55.195.193/ |
|
| Need a way to disguise SSH traffic as HTTP traffic. http://45.55.195.193/viewtopic.php?f=7&t=16424 |
Page 1 of 1 |
| Author: | mail2345 [ Wed Sep 02, 2009 8:48 am ] |
| Post subject: | Need a way to disguise SSH traffic as HTTP traffic. |
So apparently my school does a brief scan on packets. It lets SSL though, but notices SSH traffic on port 80. I'm trying to bypass the filter for IRC and other apps besides the web. Any ideas? |
|
| Author: | Ophanim [ Wed Sep 02, 2009 11:20 am ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
IRC uses SSL why do you need SSH. |
|
| Author: | MacAnkka [ Wed Sep 02, 2009 4:09 pm ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
You could try Telnet, the filter might let it through. Unofrtunately it isn't very secure (at all). A quick google shows something like this, though: http://linux.about.com/cs/linux101/g/telnetssl.htm SSL-secured telnet. You'd need to install it on both the server and client, though, so you need to have access to both of them (so if you are using a public linux shell or something like that, it might not work for you). |
|
| Author: | ProjektTHOR [ Wed Sep 02, 2009 6:53 pm ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
The school likely doesn't use DPI to block SSH, it likely just blocks all outgoing packets on port 80. Create an SSH tunnel to an external machine on a port that isn't a commonly used port. |
|
| Author: | mail2345 [ Mon Sep 07, 2009 12:44 am ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
THOR's idea does not work, TT, the system blocks known IRC ports, and I am not gonna have my computer raped by a bunch of script kiddies with packet sniffers. |
|
| Author: | robowurmz [ Mon Sep 07, 2009 10:28 am ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
Proxy, or HTTP Tunnelling. Both are very effective. EDIT: And by "Proxy" I don't mean those cruddy websites that you browse with, I mean actually using a proxy server to connect to the net. There's guides online on how to set up a home pc for use as a proxy server. |
|
| Author: | ProjektTHOR [ Mon Sep 07, 2009 1:36 pm ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
There's no reason an SSH tunnel shouldn't work. http://www.techimo.com/forum/networking ... h-irc.html I shoudn't have to tell you to google this ♥♥♥♥. |
|
| Author: | mail2345 [ Mon Sep 07, 2009 6:11 pm ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
I know how to make an SSH tunnel, it's just that the filter blocks the SSH tunnel. The filter detects proxy protocols as well(SOCKS and the like). |
|
| Author: | ProjektTHOR [ Tue Sep 08, 2009 2:34 pm ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
Then use another port for the tunnel? SSH tunnels do not require a specific port. There is almost zero chance your institution is using Deep Packet Inspection to block SSH traffic based on packet content. They are just blanket blocking ports. Keep randomizing ports until you find one. ssh -l user -L port:server.tld:port server.tld It's not that hard. If one port doesn't work try ♥♥♥♥. |
|
| Author: | mail2345 [ Tue Sep 15, 2009 4:51 am ] |
| Post subject: | Re: Need a way to disguise SSH traffic as HTTP traffic. |
ProjektTHOR wrote: it likely just blocks all outgoing packets on port 80 Just realized no, it is open. |
|
| Page 1 of 1 | All times are UTC [ DST ] |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|