Timeline for Trying to tunnel a reverse shell out of an internal network
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 21, 2017 at 2:32 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 21, 2017 at 10:28 | history | tweeted | twitter.com/StackSecurity/status/932918541774356481 | ||
| Nov 21, 2017 at 2:11 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Oct 22, 2017 at 2:10 | answer | added | user0809452345 | timeline score: 2 | |
| Oct 19, 2017 at 2:46 | comment | added | Allison | I think an ICMP based reverse shell would be a really novel way to beat the challenge. You may not even have to implement fully correct ICMP headers assuming whatever firewall that they're using is just looking at headers. It might be as simple as ripping some random reverse shell off github, tacking a header on to each packet, and removing it on the other side. | |
| Oct 16, 2017 at 20:30 | comment | added | user0809452345 | @Trickycm I think you are right. Once I got that initial breach I think I got excited and got tunnel vision (no pun intended) on that one machine and wasn't really thinking it through so I definitely need to start looking at the rest of the LAN. Thank you sir | |
| Oct 16, 2017 at 20:26 | comment | added | TrickyDupes | Don't get hung up on the initial machine. You can get carried away with excitement sometimes when a reverse shell lands, but given this is a contrived test env the creator may well have created this box as a red herring. At the least you have a beachhead into the LAN where you can upload arbitrary tools. Upload nmap and do a proper LAN scan (if you can, this will be noisy and may trigger IDS if their is any) | |
| Oct 16, 2017 at 20:23 | comment | added | user0809452345 | @Trickycm I did see another ip on the network looking at the arp table. So yeah, maybe I do need to move horizontally first, didn't really think about that before. I'll do a scan and see what I get. Thank you | |
| Oct 16, 2017 at 20:17 | comment | added | TrickyDupes | Have you scanned the LAN? You may need to move horizontally before you can get out. | |
| Oct 16, 2017 at 20:14 | review | First posts | |||
| Oct 16, 2017 at 20:35 | |||||
| Oct 16, 2017 at 20:11 | history | asked | user0809452345 | CC BY-SA 3.0 |