Загрузка...

Bypassing Network Firewalls with HTTP and DNS Tunneling

Your network admin blocked port 22. You're stuck on a hotel WiFi that only lets DNS through.
This video shows you exactly how attackers and penetration testers get through both of those scenarios.
Two real tunneling techniques, each one more extreme than the last. By the end of the video you will watch a browser load a website on a network that has absolutely no internet access. Every byte traveling through DNS queries.
⚠️ Everything in this video is for educational purposes only. Only test on systems you own or have explicit permission to use.

What you will learn:

Why open ports are not just a convenience, they are a potential bypass
How to wrap SSH inside HTTP traffic to defeat port-based firewalls
How DNS tunneling works and why it is nearly impossible to block
How defenders can detect each technique
📌 Chapters
0:00 Browsing the internet on a network with no internet
0:45 Hiding SSH inside HTTP with httptunnel
03:51 Full internet access through DNS queries only
🖥️ Lab Setup
Two Kali Linux VMs on VirtualBox. Client VM uses ufw to simulate network restrictions. Server VM has a NAT adapter for real internet access.
sudo apt install httptunnel iodine proxychains4 chromium -y

📖 Commands
Chapter 2 - Firewall Setup
sudo ufw reset
sudo ufw default deny outgoing
sudo ufw default allow incoming
sudo ufw allow out 80/tcp
sudo ufw enable
Chapter 3 - HTTP Tunneling
# Server
sudo hts --forward-port localhost:22 80

# Client
htc --forward-port 8022 192.168.56.101:80
ssh -p 8022 localhost
Chapter 4 - DNS Tunneling
# Server
sudo iodined -f -c -P hacktheplanet 10.0.0.1 tunnel.test
sudo sysctl -w net.ipv4.ip_forward=1
sudo iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE

# Client
sudo ufw disable
sudo iodine -f -P hacktheplanet 192.168.56.101 tunnel.test
ssh -D 9050 -N kali@10.0.0.1
chromium --proxy-server="socks5://localhost:9050" https://example.com

🔗 Tools Used

ufw: https://help.ubuntu.com/community/UFW
httptunnel: https://github.com/larsbrinkhoff/httptunnel
OpenSSH: https://www.openssh.com
iodine: https://code.kryo.se/iodine
🔔 New videos every week on ethical hacking, network security, and the tools professionals actually use.
Found this useful? Like and subscribe and drop a comment telling me which technique surprised you the most.

Видео Bypassing Network Firewalls with HTTP and DNS Tunneling канала Nour's tech talk
Яндекс.Метрика
Все заметки Новая заметка Страницу в заметки
Страницу в закладки Мои закладки
На информационно-развлекательном портале SALDA.WS применяются cookie-файлы. Нажимая кнопку Принять, вы подтверждаете свое согласие на их использование.
О CookiesНапомнить позжеПринять