Bouncing with proxy servers.
You probably already know that you can bounce through a proxy using
the GET command i.e. (GET http://neworder.box.sk). This will only
work for viewing web pages though. In this tutorial we will touch
on how to bounce to any port on any computer (as long as the method
is setup on the proxy server :).
First off we will start by opening up telnet so Windows users click
start then go to run and type "telnet bouncethroughthisproxy.com 80"
(note the above won't work :). Linux users open up the kernel and
use the same command. Once you are connected type
"GET http://neworder.box.sk" (press enter twice after typing the
command). After a slight pause you should see the neworder website
flash by the screen. It will obviously be the HTML code since you
aren't using a web browser.
Okay that works fine, but how do we bounce to a different port
while maintaining a connection?
In this example we will bounce to port 25 (main protocol)
on a server.
Open up telnet to the proxy server. Now that you are connected
type "CONNECT mailserver:25" (enter enter) (Note this won't work
on all proxy servers you try it on. For instance the admin may
have removed it from the proxy servers command list.) If the
connection goes through you should see something like this.
HTTP/1.0 200 Connection established
Proxy-agent: CacheFlow-Proxy/1.0
220 mailserver.com ESMTP Sendmail 8.11.0/8.11.0; Wed, 25 Sep
2002 11:25:17 - 0700
Now you can start sending the fake email, or connect to other
servers using the proxy.
Finding open proxy servers.
You can find a list of proxy servers on the web. Just go to
a site like http://www.findproxy.com/index.html. (Note
there is a list of sites that have a list of proxy servers
on the neworder.box.sk website.) Once you get a list you
can write your own program to check each proxy in a list
to see if this method will work on them. You could also
download a proxy program to check servers in a list for
you.
Comments/Complaints email KSMChess@yahoo.com
-SysOp007
(
geocities.com/hiddenbunkerlabs)