[Johnny]

I just found this method to bypass IP filtering for webserver or databases, I used it to reach a filtered phpmyadmin webpage which was accessible only via localhost.

Hidden Content

You must register or login to view this content.

[Johnny]

I share what I can

[depressed]

thats smart tho

[Johnny]

thats smart tho

Thanks, I'd like to test it combined with netcat on target, that would be interesting.  I want to test in my lab if it is possible to foul watchguard's firewall with SSH and netcat. I think that all firewall rules without proxy inspection should be able to be bypassed, but even some rules with proxy inspection probably won't recognise the attack. Maybe watchguard epdr could recognise it but you need interaction directly to the endpoint for it to work

[kingb0b]

great sharing

[bengalurukkh]

Educational Share MAte, thanks for this

[Johnny]

I am glad you liked this. I successfully tested this method to bypass firewall policies which were blocking specific ports on target. So almost any Nat can be bypassed if the SSH server has access to the rest of the network

[DonaldTrump]

Nice thank you for sharing

[Johnny]

If someone likes this enough can please add me some reputation? Lol

[Diplopia]

This would've been pretty useful for me in the past