[gogreendv]

hello, members!
Can you circumvent various types of firewalls?
What do you do if a web firewall exists?

[Drako]

Well... You could always use a VPN. There are plenty of cracked accounts here. You'd only encounter a problem if the firewall blocks establishing connections to the VPN servers themselves, or you don't have admin access.

[gogreendv]

Well... You could always use a VPN. There are plenty of cracked accounts here. You'd only encounter a problem if the firewall blocks establishing connections to the VPN servers themselves, or you don't have admin access.

You are okay.
You are mistaken.
What I mean is that it bypasses the web firewall and accesses the server rather than the VPN.
If so, what are you going to do?
Good Luck for you!

[mothered]

It's not possible to be conclusive without researching It's configuration.

For Instance, If a WAF has Implemented a case-sensitive blacklist as part of It's data sanitization, a UNION SELECT SQLi, In the form of uNIoN sELecT may well circumvent It's filter. The attack will be In a similar format as per below.

Code:

http://thetargetsite.com/index.php?page_id=-25 uNIoN sELecT 1,2,3,4,5,6

[gogreendv]

It's not possible to be conclusive without researching It's configuration.

For Instance, If a WAF has Implemented a case-sensitive blacklist as part of It's data sanitization, a UNION SELECT SQLi, In the form of uNIoN sELecT may well circumvent It's filter. The attack will be In a similar format as per below.

Code:

http://thetargetsite.com/index.php?page_id=-25 uNIoN sELecT 1,2,3,4,5,6

I mean web firewall, not SQL Injection.
What would you do if you blocked the shell from the web firewall?

[mothered]

I mean web firewall

WAF= Web Application Firewall.

[gogreendv]

I mean web firewall

WAF= Web Application Firewall.

You are okay.
I know it too.
But what I'm saying is that if you use a vulnerability to upload to a server, the firewall blocks it when you load the shell.
Thank you.

[Cr3aTor]

I mean web firewall

WAF= Web Application Firewall.

You are  okay.
I know it too.
But what I'm saying is that if you use a vulnerability to upload to a server, the firewall blocks it when you load the shell.
Thank you.

It really depends on how the firewall is configured, but most of them allow HTTP/HTTPS traffic as well as DNS. Therefore, you could just use a HTTP shell and exfiltrate data through DNS. ( these are just some ideas solutions you can come with, but as mentioned before it really depends on the system you're attacking )

[gogreendv]

WAF= Web Application Firewall.

You are  okay.
I know it too.
But what I'm saying is that if you use a vulnerability to upload to a server, the firewall blocks it when you load the shell.
Thank you.

It really depends on how the firewall is configured, but most of them allow HTTP/HTTPS traffic as well as DNS. Therefore, you could just use a HTTP shell and exfiltrate data through DNS. ( these are just some ideas solutions you can come with, but as mentioned before it really depends on the system you're attacking )

That's good idea.
However, the DNS protocol can also be limited in data size.
Think about whether there is another way.
Thank you.

[Cr3aTor]

You are  okay.
I know it too.
But what I'm saying is that if you use a vulnerability to upload to a server, the firewall blocks it when you load the shell.
Thank you.

It really depends on how the firewall is configured, but most of them allow HTTP/HTTPS traffic as well as DNS. Therefore, you could just use a HTTP shell and exfiltrate data through DNS. ( these are just some ideas solutions you can come with, but as mentioned before it really depends on the system you're attacking )

That's good idea.
However, the DNS protocol can also be limited in data size.

This is not really a problem since you can send multiple packets and then reassemble the data. I think the more important aspect of it is to be stealthy, and this can be accomplished by not sending all the data you wan to exfiltrate at once. Just send 2-5 packets once in 5 hours or something like that. Probably you would know better since, again, this depends on your environment.
Regarding exfiltration you could also use pastebin API or other similar websites, but this might raise some suspicion.

Oh and if you are currently attacking a website without permission, just be careful. Things like that can take away some years of your live and completely redirect the normal path of your current live, so don't do anything stupid. I don't think it's worth it after all.

Regardless, good luck and be cautious