1. Anti-Hacker Tool Kit Chapter 13 Port Redirection Roy Chang Information Networking Security and Assurance LAB Department of Communications Engineering National Chung Cheng University

2. Introduction  Listen on a port  Client/Server method WEB FTP SSH SMTP

3. Port Redirection 80 5050 80 4023

4. DataPipe  Pass TCP/IP traffic  http://www.bovine.net/~jlawson/coding/da tapipe/datapipe.c

5. Fpipe  Out band source port and UDP support  http://www.foundstone.com/resources/proddesc/fpipe.htm Port:4433 Port:5678 Port:80

6. Port Hopping- Local Redirection C:\fpipe –l 1234 –r 80 localhost./datapipe localhost 1234 80 1234 80 Host

7. Port Hopping- Client Redirection Spork, IIS exploit code on Port 80 IIS Port 7070 80 8080 C:\fpipe –l 80 –r 7070./datapipe 80 7070 80

8. Port Hopping- Dual Redirection fpipe –l 1433 –r 25 Host AHost BHost CHost D./datapipe 25 1433 SQLFTP+mail

9. Summary  Host security  Ingress filter  Allow what you want  Deny all  Egress filter  Proxy firewall

10. Reference  RFC 1700