Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am trying to hack windows server 2003 sp2, i can see a lot of services running on target, there is also a lot of backdoors listing on ports like netbus, remote-everything .... But Firewall (as i guess) is refusing any tcp connection, except on some ports is there any way to bypass the firewall?

note: I am using Metasploit

share|improve this question

closed as not constructive by schroeder, Hendrik Brummermann Aug 10 '12 at 5:41

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
UDP spoofing is my best guess, can you tell which version of the networking it runs? –  Andrew Smith Aug 2 '12 at 20:09
    
We would need a lot more data about your testing setup to really help. Can you run a packet sniffer on the server to see if your packets are reaching your target? –  schroeder Aug 2 '12 at 20:16
    
OK I see sp2 havent read it - with this you can maybe crash firewall? Do you know what hardware does it run? –  Andrew Smith Aug 2 '12 at 20:53
    
i ma sure that packets are reaching firewall, because when metasploit tries to create the reverse connection, i receive a message says : connection refused by host –  user1028 Aug 2 '12 at 21:10
    
i do not know what u exactly mean by version of networking, i am working on a LAN, and there is one 3layer switch between my machine and target machine, –  user1028 Aug 2 '12 at 21:15

1 Answer 1

The 'best' way to bypass a firewall is client-side. Get a payload to a user on the target, which connects back out. Emails and browsers are the most common.

share|improve this answer
    
in fact my target is a server used as a proxy. there are no users to surf net or opening emails on this machine –  user1028 Aug 2 '12 at 20:58

Not the answer you're looking for? Browse other questions tagged or ask your own question.