November 18, 2009
I would like to try to use MeerKat to tunnel from my home (private network) through my schools gateway (not allowed to hack this box) to a private virtual network. The private VN is where I am permitted to run all of my tools for class and am supposed to attack the boxes on the private virtual network.
All boxes have sshd and ssh and I can tunnel through to private end point. How would I redirect all applications (ie. Metasploit, NMAP...) through tunnel to allow discovery from my local machine?
Thanks in advance, this is for a University class for Ethical Hacking.
Keith
November 18, 2009
#2
Do you think this is possible
The tools I'm using are Open Source, including nmap... I found the following and was curious if you think it is possible to recompile my apps as described or would I be asking for nothing but headaches
This new protocol extends the SOCKS Version 4 model to include UDP, and extends the framework to include provisions for generalized strong authentication schemes, and extends the addressing scheme to encompass domain-name and V6 IP addresses. The implementation of the SOCKS protocol typically involves the recompilation or relinking of TCP-based client applications to use the appropriate encapsulation routines in the SOCKS library.
Read more: http://www.faqs.org/rfcs/rfc1928.html#ixzz0XGRiXkL2
November 20, 2009
#3
I have heard of programs that
I have heard of programs that don't even require recompiling, such as Socksify. They can add SOCKS capability to arbitrary apps (games, tools, etc.)
But I'm wondering if it just might get confusing on diagnostic tools to tunnel them. I'm really not sure. Kind of out of my area of expertise :-/
Want to join the forums? Create an account or login.
I'm not sure this is possible. The basic form of port forwarding is meant forward a specific TCP port either inside or outside of your network.
The "dynamic" method essentially offers a SOCKS proxy, which works with services such as HTTP to dynamically forward all requests, regardless of destination, through the tunnel.
The latter is closer to what you want, but unless the tools you are using support SOCKS, I don't think it will be of much use to you.
Additionally, using something like NMAP's UDP support will not work as SSH tunnels only support TCP.