Port Knocking Posted By Kirt An introduction to how trusted users can manipulate firewall rules to transmit information across closed ports.

Diggin Em Walls (part3) - Advanced/Other Techniques for ByPassing Firewalls Posted By Ka0ticSH Preface: In the previous documents related to this series, Diggin Em Walls Part 1 and Diggin Em Walls Part 2, I noted various techniques and methods used to detect firewalls, probe networks behind firewalls, and even bypass firewalls through port redirection. In this document we will discuss other means and techniques of detecting hosts behind firewalls, bypassing firewalls, protocol tunneling and some insecurities with certain types of packetfiltering techniques. For this document, knowledge in TCP/IP, networking, Access Control Lists, and most firewall concepts, and it would help if you read my other two parts =D. Enjoy.

Diggin Em Walls (Part 2): Firewall Penetration through Port Redirection Posted By Ka0ticSH This is part 2 of my first document, Diggin em Walls Part1: Detection of Firewalls and Probing Networks behind Firewalls. This article will discuss ideas and techniques of penetrating firewalls through port redirection. You will need knowledge in TCP/IP, networking, UNIX, ACL's and how they work. Enjoy. Preface: In some cases, a filtering device may filter out all packets except for packets from a certain network, or system. If this is the case, an attacker might compromise the key target system, or a key system on a network which has access beyond the firewall and then use port redirection to exploit a trust with the firewall. Allowing the intruder a hole in the firewall, in a case which he might foward packets to a specified destination in a once "firewalled" area. Redirection works by listening on a certain configured port, and redirecting all raw packets to a secondary destination.

Diggin Em Walls Part1: Firewall Detection and Network Probing Behind Firewalls Posted By Ka0ticSH This paper will discuss identification, detection and the penetration techniques of firewalls, more specifically; the ability to probe a network behind a firewall. The continued version will discuss the ability to have access to a key or target network behind a firewall, without having to disable/alter the firewall, and again a bit more specifically; port redirection techniques. It is recommended that you have knowledge of networking, the UNIX Operating system, and an nmap utility on hand (http://www.insecure.org/nmap). Enjoy...and my apologies for the crappy format.