Themenabend/Firewall Piercing: Unterschied zwischen den Versionen

Aus C3D2
Zur Navigation springen Zur Suche springen
Keine Bearbeitungszusammenfassung
(stückchen weiter ...)
Zeile 1: Zeile 1:
Contents:
{| border="1" cellpadding="2"
{| border="1" cellpadding="2"
|-
|-
Zeile 6: Zeile 5:
|-
|-
| ICMP-Tunnel
| ICMP-Tunnel
|  
| Firewall Intro (Ausarbeitung, Vortrag zusammen)
|-
|-
|hiding stuff in ip headers
|hiding stuff in ip headers
|  
| ip and ssh tunnel
|-
|-
|
| http,https,http-header
|-
|
| DNS-tunnel (mit Verweis auf DNS-Vortrag)
|-
|-
|}
|}
= Contents =


* short Intro to Firewalls
* short Intro to Firewalls
Zeile 24: Zeile 32:
* the art of hiding (backpacking your data)  
* the art of hiding (backpacking your data)  
** Tunnel
** Tunnel
*** ip tunnel
*** ip tunnel (incl. Why TCP over TCP is a bad idea)
*** ssh tunnel
*** ssh tunnel


Zeile 42: Zeile 50:


more to come ...
more to come ...
=Storyline=
== Introduction ==
* Welcome ... Thanx for comming ... In Aug we did TA for c3d2 about Firewalls, Got interested in that topic or some joke
* What is a firewall?
** Packetfilter
*** stateless
*** stateful
*** NAT (IP header recalculation, CRC checks ...)
** Application Layer Gateway
''' If you believe in those systems giving you the perfect protection: Don't waste your time! Good bye!'''
* What we are going to show:
** '' To circumvent firewalls one has to be creative ... find a whole in the set-up, exploit it! Enjoy!''
** We show you:
*** some basic techniques and tools
*** some examples

Version vom 22. November 2004, 10:09 Uhr

Caldrin Alien8
ICMP-Tunnel Firewall Intro (Ausarbeitung, Vortrag zusammen)
hiding stuff in ip headers ip and ssh tunnel
http,https,http-header
DNS-tunnel (mit Verweis auf DNS-Vortrag)

Contents

  • short Intro to Firewalls
    • Packetfilter
      • stateless
      • stateful
      • NAT (IP header recalculation, CRC checks ...)
    • Application Layer Gateway
  • Basics
  • nc / cryptcat
  • the art of hiding (backpacking your data)
    • Tunnel
      • ip tunnel (incl. Why TCP over TCP is a bad idea)
      • ssh tunnel
  • Simple Examples of tunnel
    • HTTPS-Tunnel (connect)
    • Http-Tunnel (GET / POST)
    • Web-Shell
  • Advanced Examples
    • HTTP header
    • ICMP-Tunnel
    • DNS-Tunnel
    • hiding stuff in ip headers
    • E-Mail tunnel


more to come ...

Storyline

Introduction

  • Welcome ... Thanx for comming ... In Aug we did TA for c3d2 about Firewalls, Got interested in that topic or some joke
  • What is a firewall?
    • Packetfilter
      • stateless
      • stateful
      • NAT (IP header recalculation, CRC checks ...)
    • Application Layer Gateway

If you believe in those systems giving you the perfect protection: Don't waste your time! Good bye!

  • What we are going to show:
    • To circumvent firewalls one has to be creative ... find a whole in the set-up, exploit it! Enjoy!
    • We show you:
      • some basic techniques and tools
      • some examples