ACK Tunneling Trojans

– Arne Vidstrom, arne.vidstrom@ntsecurity.nu
Summary

Trojans normally use ordinary TCP or UDP communication between their client and server parts. Any firewall between the attacker and the victim that blocks incoming traffic will usually stop all trojans from working. ICMP tunneling has existed for quite some time now, but if you block ICMP in the firewall you’ll be safe from that. This paper describes another concept, that I call ACK Tunneling. ACK Tunneling works through firewalls that don’t apply their rule sets on TCP ACK segments (ordinary packet filters belong to this class of firewalls).

Stealth Proxy for Windows 95/98/NT/2000
—————————————

OK. Neccesity is the mother of invention and this was something I needed a while back and finally got around to making. Basically, it’s a SOCKS 4/5 proxy server that runs in the background with no obvious signs that it’s doing so. The idea is, if you have access to a machine and want do ‘stuff’ anonymously and don’t trust public ‘anonymous’ proxy servers this might be for you.

Serve Cmd
This program is based off of netcat(thanks to Hobbit). This program allows multiple connections while netcat only allows one and is a bit easier to use. Run this program on any NT machine to open a remote shell on any port You can start the program hidden (/h) and also assign it what port to listen on(default is 2323). Type “srvcmd.exe /?” for help. Once the program is listening telnet into the computer on that port and you have a shell(cmd) environment waiting for you. The shell will have the same permissions as the user who started the program. If the shell is started with administrator access, you can do things like add users via the net command:

// Introduction

OK, this is just a little re-packaging of ‘RuX UPLOADER’ with a few
modifications to the batch file for clarity and so that the victim
can’t see any ftp activity once the uploader is run. Also, I have
included COM2EXE to convert the COM file created by BAT2COM into an
EXE file and a batch file to automate the process. If you want to
read the original readme, I’ve included it as readme.old.

——————————————————————————
FPipe v2.1 – Port redirector.
Copyright 2000 (c) by Foundstone, Inc.
http://www.foundstone.com
——————————————————————————

FPipe is a source port forwarder/redirector. It can create a TCP or UDP stream
with a source port of your choice. This is useful for getting past firewalls
that allow traffic with source ports of say 23, to connect with internal
servers.

Visual Basic Script Exe Creator

What is does?
Store binary code inside of a visual basic script. Store an executable
inside of a visual basic script. Then when the vbs script is executed,
it will create the executable, and execute it. Executing it is optional.
You can also edit the vbs file and put other things inside. So, the vbs
file carries your executable. This could be useful. Find a good program that
you want stored in a vbs file. The vbs file will be a vbs file and also
carry the executable, no one can notice. Also, the exe should be small,
very small or else the vb script won’t be able to create the binary file.

This is a fairly simple modification that can be made to any phone. All

it does is allow you to take any 2 lines in your house and create a party
line. So far I have not heard of any problems with it from my friends that
have set one up and I have not had any either. There is one thing that you
will notice when you are one of the two people who is called by a person with
this box. The other person will sound a little bit faint. I could overcome
this with some amplifiers but then there wouldn’t be very many of these boxes
made. I think that the convenience of having two people on line at any one
time will make up for the minor volume loss.

(> Phone Modification Instructions <)

—————————————————————–
– The Marshals of Dynamic Discord –
– Present –
—————————————————————–
– The Chartreuse Box (or any other obnoxious color) –
—————————————————————–
– By: Wonko The Sane –
—————————————————————–

Intro
—–

The Chartreuse Box, so named because this is an obnoxious box
and chartreuse is an obnoxious color, is designed to take
advantage of the thousands of dollars Ma Bell pays to the electric
company each day. As you know, your telephone line is a constant
power source. The chart box is designed to allow you to tap that
power source for whatever sicko purposes you might have in mind.