Getting past the Router/Firewall...

Well heres the thing... I'm pretty well versed in concepts of hacking inside a network, but I've begun testing in senarios were a router is acting as a firewall, and I am outside the network. really have no clue how to get past it or to get any info.

Given that I have an IP, how is it possible to get an idea of the network topology, or at least contact to any system inside the network. If you guys have any info or links to documentation, I would really apriciate it.

Things I'm interested in:

Acessing specific machines from outside a router/firewall

Possibly ways to enumerate or attack a router (in order to penetrate the network)

Viewing network topology from outside a router


Any help would be greatly apriciated

I'm pretty sure what you're describing (in simple terms) is: breaking into a network over the net? If so, you're in the wrong place Toto.

Nice job making it sound nice and intelligent though. I'll give you some credit for a valuable attempt.

- Cheers,
jag291

You are immidiatly assuming that I have intentions to break the law... You are correct, I am asking about breaking into a network over the net, but have said nothing of breaking the law.

It isnt my job to prove my intentions to you, but plain and simple, I am asking for information, and that information should be shared by those willing. I've been on AO for some time, but I rarely post, and I know there is a lot of kiddies who just want to learn to be cool hax0rs and have poor intentions.

I doubt that you realy care, but I am very interested in network security and I would like to work in the industry someday. As a system administrator I'm closly related to the field anyway and this knowledge is usefull to me.

like I said, I would really apriciate any help

even though you may be doing this for good intentions (aka a hackers job to make sure information is freely distributed) this community is probably the wrong place, if however you were to delete this topic and rephrase it from the security point of view (aka how can I prevent this from happening) then I'm sure you'd get tons of help and tons of antipoints to boot (even though antipoints aren't everything, as Jaquar taught me). Hope that helps


-Cyberspyder

Heres an article on firewall penetration testing.

http://www.wittys.com/files/mab/fwpentesting.html

I'm pretty well versed on this communities views of things.. I reallly dont think I need much more explaination than I have given... and I dont think antionline is the wrong place at all to ask these questions either... this is the first time I've gotten hassled for asking a question.

I appriciate the link cwk9, that is helpfull. Does anyone have links to articles dealing with routers? I've been testing with a standard linksys 6 port router but I want soemthing more general. Basicly I want to be able to apply basic enumeration techniques through a routed network.

sure :)

http://www.oreillynet.com/cs/user/view/cs_msg/7690

http://www.securiteam.com/securitynews/6J00L0K60U.html

http://www.safermag.com/html/safer41/alerts/23.html

http://www3.sympatico.ca/nibblesnbits/howto.html

http://www.informit.com/isapi/produc...tent/index.asp

http://www.business2.com/webguide/0,1660,69408,00.html

http://www.hardwareseeker.com/articl...rnet%20Routers

http://www.informit.com/isapi/produc...t/articlex.asp

http://www.circuitcellar.com/library...akos0502/6.htm

http://www.linuxsecurity.com/article...icle-4528.html ( linux )

http://www.routescience.com/news/pre_new_art.html

http://lists.insecure.org/lists/pen-.../Jul/0070.html

http://www.sans.org/rr/paper.php?id=167

http://www.derkeiler.com/Mailing-Lis...2-07/0068.html

http://www.procheckup.com/services/prochecknet.html

http://www.fbtechies.co.uk/servicesoverview.htm

Everytime someone makes a post that actually deals from the attackers point of view, they get flamed.

I think that the people who flame are just full of themselves and dont' know the answer to the flamed question in an effort to sound smart.

If your not going to help the peson out, dont post! I dont care if the question is from the most 1337 script kiddie, if you dont post, the topic will die.

AO should help people learn, not discourage it.


As for Liquid_Darkness's question, I too dont' know how to get past routers. (but switchs/hubs are a different story) Though I would like to know the answer so if anyone can help, I would be grateful. (or should I say, how to prevent hacking routers. :)

Hi Liquid

In my viewpoint hacking does involve lot of tech-know-how .

but it requiries 10 times of mindpower .

If you can get past the minds - no secuirty is safe enough , you jst need to think abt exsisting system thouroughly , test it using your tech-know-how .

and your are done .

no firewall can stop you .

Its all abt human errors . and remember nobdy keeps all ports closed u jst need to choose the rite one . after all ports are services . hammer it , try to get into nearyby trusted networks .

nmap is great tool to start of go thru it .

If you're willing to spend the money, you may want to look at the Hacking Exposed series, recently mentioned in a few threads here. Right now I think it runs at about $50 for the main book (Hacking Exposed 4th Edition). To all those quick to say he should not be doing this, how can you know you have a secure network if you have not tried to get in yourself? That is why there are _security_ tools like SAINT/SATAN out there.

Quote:

---

Originally posted here by Liquid_Darkness
You are immidiatly assuming that I have intentions to break the law... You are correct, I am asking about breaking into a network over the net, but have said nothing of breaking the law.

It isnt my job to prove my intentions to you, but plain and simple, I am asking for information, and that information should be shared by those willing. I've been on AO for some time, but I rarely post, and I know there is a lot of kiddies who just want to learn to be cool hax0rs and have poor intentions.

I doubt that you realy care, but I am very interested in network security and I would like to work in the industry someday. As a system administrator I'm closly related to the field anyway and this knowledge is usefull to me.

like I said, I would really apriciate any help

---

I apologize for assuming that you are going to do something illegal but that's what most of these kinds of questions end up leading to: illegal activities or attempts at illegal activities.

In an attempt to help I went to altavista.com and started looking for "bypassing routers" and was only able to find a few relevant documents:

http://www.schneider.eclipse.co.uk/a...ngdnsrelay.htm (Short but could be helpful.)

http://kurtm.net/gnuchowto/#3.1 (Gives a lil' insight... not much help though.)

http://www.cisco.rw/univercd/cc/td/d...b.htm#xtocid36

http://www.ciscosystems.co.ck/univer...pb.htm#1015689

http://altavista.com/web/results?q=b...kw=xytx&stq=20 (PDF, not how to bypass but does give information on they are set up.)

- Cheers,
jag291

I'm glad not everyone on here has such a hard time helping out somone seeking knowledge. I agree that AO shouldnt be so harsh on people taking a different perspective int here posts if they dont clearly have bad intentions.

to akhooja: I agree with what you are saying but I'm looking for more technical specifics. There is many ways to get into a network or a system, but right now I'm trying to learn about getting around a router.

to Kezil: actually I have the 3rd edition of Hacking Exposed and Hacking Linux Exposed. Those are very usefull. My personal favorite is Counter Hack(if you havnt read it, I realy recomend it). Unfortunatly my books are in storage so I cant just skim over a chapter on getting past a router.

anyone else got any tips?

Ohh, thanks a lot Jaguar... I didnt even think about checking astalavista. I'll read the links when I get off work. I totally understand the assumptions, I just see this happen a lot and I thought my post was a fair question