From: Shenk, Jerry A (jshenk@decommunications.com)
Date: Tue Jan 24 2006 - 11:21:39 EST
Another problem (challenge;) would be gaining access from behind a
NATting device. Sometimes, they'll modify the headers and make the
packets look like they originated on the NATting device. Some fields
would probably work better than others.
-----Original Message-----
From: Joachim Schipper [mailto:j.schipper@math.uu.nl]
Sent: Tuesday, January 24, 2006 4:57 AM
To: pen-test@securityfocus.com
Subject: Re: an anternative to port-knoking using the OpenBSD pf only
On Mon, Jan 23, 2006 at 10:44:52PM +0100, poplix wrote:
> Hi there,
>
> I wish to propose an alternative to port knoking that uses the native
> OpenBSD's pf code only. The idea is to use the pf's passive os
> fingerprinter to authenticate initial SYN packets.
> With a tool (or kernel patch) able to rewrite packets header is
possible
> to use a specific sequence of header fields as a key to validate
> packets.
This is an interesting - albeit not exactly new - idea, but it has the
very real disadvantage over port knocking that it requires priviliges
(typically root) on the connecting host.
Joachim
------------------------------------------------------------------------
------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on
your
website. Up to 75% of cyber attacks are launched on shopping carts,
forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers
are
futile against web application hacking. Check your website for
vulnerabilities
to SQL injection, Cross site scripting and other web attacks before
hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
------------------------------------------------------------------------
-------
**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business.
------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:
Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:
http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:25 EDT