Sensepost released their JSP/PHP/ASP pivot/covert channel named reDuh :

Basic concept :
  • Glenn has the ability to upload / create a JSP page on the remote server
  • Glenn wishes to make an RDP connection to the server (visible to the web-server behind the firewall)
  • The firewall permits HTTP traffic to the webserver but denies everything else


Post a Comment