[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] RE: By passing surf control



I do the ssh bypass everyday at work ;) works absolutely perfect hehehe.

ssh -C -L 8080:anon.proxyserver.com:3128 user@host.com
export -p http_proxy=http://127.0.0.1:8080 ; lynx www.google.com

Connect your browser to 127.0.0.1 3128 and fwd over ssh tunnel and out anon proxy addy out on the net . . .. you get the idea.

hope this helps.

~!>D

Otero, Hernan (EDS) wrote:

That is very easy if you can have a machine in the net with ssh server...

With a standard proxy that support CONNECT METHOD (Typically HTTPS
connections) using putty and a ssh server listening in port 443 you can
forward any port via tunneling.

Look at your logs looking for an endless HTTPS connection..., with tons of
traffic.

Regards,

Hernán

-----Original Message-----
From: Kudakwashe Chafa-Govha [mailto:KChafa-Govha@bankunitedfla.com] Sent: Miércoles, 25 de Febrero de 2004 17:04
To: 'pen-test@securityfocus.com'
Subject: By passing surf control


Hello Group,


Does anyone have any information on how to by pass a web content filter? We use Surf Control to monitor and filter web content. However, I have one of my users who was able to by pass this. We tried using a proxy to by pass just for testing purposes but it did not work. I am still trying to figure out what other method he used to do so. If anyone has any information , it will be greatly appreciated.

Thanks

Kuda

****************************************************************************
**********************
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or
the sender immediately. Unless you are the intended recipient or his/her
representative you are not authorized to, and must not, read, copy, distribute, use or
retain this message or any part of it. ****************************************************************************
**********************



--------------------------------------------------------------------------- ----------------------------------------------------------------------------

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html





_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html