next »

[cd1]

Has anyone here looked at Orbited?  It looks like a pretty neat library.  It let's you implement pretty much any network protocol tunneled through http and javascript.  It's one of those things that I know there's a really cool use for, but I can't think of it right now.

http://www.orbited.org/

[perkiset]

Didn't even know about it till you just posted.

Just walked the code a bit - it looks like they are using XMLHTTPRequest to pass specially shaped packets on to a python backend that acts as an agent for the client. The problem, of course, with simply connecting a client to some other box and some other port is that XMLHTTPRequest requires that you connect to the exact same place on the exact same port as the originating web page. So you configure your Orbiter instance to <a set of parameters> then that information is moved up to the server which handles the actual connection. I did not read the Python code, so I am unfamiliar with that part of things.

It looks interesting and I'll put it in the list to look through further in the future. Thanks for the link CD.

[vsloathe]

Interesting. I have seen similar things for Perl, and also Apache when you have proxying enabled.

The sucky thing is that of course, its usability is limited. You can't really use it for nefarious purposes, since the IP address will always be your server's.

[e_d]

Interesting. I have seen similar things for Perl, and also Apache when you have proxying enabled.

The sucky thing is that of course, its usability is limited. You can't really use it for nefarious purposes, since the IP address will always be your server's.

I'll post some perl IP spoofing code here later.. for nefarious purposes.....

[perkiset]

Interesting, really, that spoofing just came up... eh boys?

[vsloathe]

Interesting. I have seen similar things for Perl, and also Apache when you have proxying enabled.

The sucky thing is that of course, its usability is limited. You can't really use it for nefarious purposes, since the IP address will always be your server's.

I'll post some perl IP spoofing code here later.. for nefarious purposes.....

If you can do a three way TCP handshake with Perl, I'd be interested in how. I've been able to affect it with some netcat scripting, but it's hard. It requires a bit of extra knowledge about loose routing and RIP. A bit of a "sideband" sort of approach to the whole thing.

[nop_90]

http://twistedmatrix.com/trac/