full-disclosure - Re: Captive Portal bypassing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 10 Dec 2007 21:07:23 -0800
From: coderman <coderman@...il.com>
To: gmaggro <gmaggro@...ers.com>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Captive Portal bypassing

On Dec 10, 2007 2:04 PM, gmaggro <gmaggro@...ers.com> wrote:
> ...
> Not everyone has access to something listening on 53 that is ready to be
> tunneled to. Nor is everyone clever enough to go about doing that sort
> of thing.

if they've got a whitelist for UDP 53 you can openvpn out nicely.  i
get hit or miss success with this; most national hotspot services use
a DNS proxy for UDP 53 traffic, so you can try OzyManDNS and bask in
the gratuitous inefficiency of your side channel transport... :)

sadly, ICMP tunnel is rarely useful these days either.

> Bah. Who cares about that. Our governments have proven they do not
> respect the rule of law; why should we?

"Pirates and Emperors"
http://www.youtube.com/watch?v=UQBWGo7pef8

apparently the answer is, "because they're bigger"

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/