Web Hack List

Other nomination

Arbitrary TCP over uploaded pages

reDuh builds a TCP circuit out of ordinary HTTP requests: upload reDuh.jsp (PHP and ASPX ports exist) to a web server, run reDuhClient locally, and [createTunnel]1234:host:3389 forwards a local port to anything the web server can reach. Several tunnels run at once, so RDP and SSH work together through a firewall that permits only HTTP. Black Hat USA 2008.

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.