13 replies to this topic

[bruder]

We are making a small firewall type utility for our internal company and as part of my task I have to find out all vulnerabilities in Firewalls. So tell me, how do I get around a firewall that has most non-common ports blocked (open ports are the normal, 1-1024).

[TcM]

Can you state some? Are they software or hardware?

[lasthell]

There is not a single firewall which can not be penetrated. The basic reason behind this is firewall only looks for ports and does not decode the protocol of the data flowing through that port. You can just make your firewall stronger not 100% penetration-proof.. First instead of blacklist of ports to be blocked, maintain the white list of ports to be allowed. You can embed NBA(Network behavior analysis) module to make firewall take more intelligent actions.
You need to use advanced IDS systems to decode application level protocols to take care of shortcomings.

[telboon]

Since you have open ports on 1-1024, any services that uses these ports can be hacked. If there's a vulnerability in your HTTP daemon, it's useless even with that firewall.

Even if you were to consider backdoor being built, it's not much of use as well. A smarter script kiddie can get the backdoor to run on common port, but not used on your computer(eg 1), and the traffic will go pass as well.

I guess the stuff your firewall blocks out is backdoor with default settings, which are the common stuff script kiddie makes. Hopefully you wouldn't get the wrath of some pro people, and you *should* be safe...

[lucy2020]

There is allways ways to beat firewalls, as long as their are connected to the internet.

[Smackie]

yeah there will always be away past a firewall.. backdoors, and alot of other ways that i ain't going to get into.

[morefood2001]

no firewall is fool proof if it has one open port either way on it.

I beat our university firewall by employing a 24x7 ssh socks proxy, but be warned that it is very bandwidth intensive!

[Xav]

Lol!

I am not even going to try at my school, because my reputation will go dooowwwn.

[Xav]

Jordan said:

Why would beating a FireWall hurt your reputation? Do they give -rep for that sort of thing there?

Posted via CodeCall Mobile

If I tried to hack the firewall and I was found out, I would never be allowed to use a computer at school again.