Login Register
The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Pivoting? filter_list
Author
Message
Pivoting? #1
I hear that with access to a low level or insecure device on a network, you can pivot over and have access to a much more secure machine (i.e. server). How exactly does this work?
"The more we learn, the more we realise how little we actually know"


Reply

RE: Pivoting? #2
Let's say you have a "SMART Fridge" and a server on the same network.
The fridge has a telnet listener on the internet so you can reach the fridge from the internet.
The server has a HTTP listener that listens for internet connections and a SSH listener witch listens for connections only from the local network.
You can't reach the servers SSH port because it's listening for local connections, but what you can do is hack the fridge. You hack the fridge and now you are on the same network as the server so using the fridge as a proxy you can now reach the SSH server.
I hope this makes sense...

Reply

RE: Pivoting? #3
(01-04-2017, 07:45 PM)Pikami Wrote: Let's say you have a "SMART Fridge" and a server on the same network.
The fridge has a telnet listener on the internet so you can reach the fridge from the internet.
The server has a HTTP listener that listens for internet connections and a SSH listener witch listens for connections only from the local network.
You can't reach the servers SSH port because it's listening for local connections, but what you can do is hack the fridge. You hack the fridge and now you are on the same network as the server so using the fridge as a proxy you can now reach the SSH server.
I hope this makes sense...
Yeah, that makes perfect sense! But why in the world would a fridge have a telnet server? xD xD xD Why would you need access to a fridge over the internet?
(This post was last modified: 01-06-2017, 07:37 PM by Dr. Keter.)
"The more we learn, the more we realise how little we actually know"


Reply

RE: Pivoting? #4
(01-06-2017, 07:37 PM)Dr. Keter Wrote:
(01-04-2017, 07:45 PM)Pikami Wrote: Let's say you have a "SMART Fridge" and a server on the same network.
The fridge has a telnet listener on the internet so you can reach the fridge from the internet.
The server has a HTTP listener that listens for internet connections and a SSH listener witch listens for connections only from the local network.
You can't reach the servers SSH port because it's listening for local connections, but what you can do is hack the fridge. You hack the fridge and now you are on the same network as the server so using the fridge as a proxy you can now reach the SSH server.
I hope this makes sense...
Yeah, that makes perfect sense! But why in the world would a fridge have a telnet server?  xD  xD xD Why would you need access to a fridge over the internet?

Simple, you need to lower the temperature to better freeze the bodies so they don't smell, but you're in court so there's no way to get home in time!
[Image: pBD38Xq.png]
Email: insidious@protonmail.ch

Reply

RE: Pivoting? #5
(01-06-2017, 07:56 PM)insidious Wrote:
(01-06-2017, 07:37 PM)Dr. Keter Wrote:
(01-04-2017, 07:45 PM)Pikami Wrote: Let's say you have a "SMART Fridge" and a server on the same network.
The fridge has a telnet listener on the internet so you can reach the fridge from the internet.
The server has a HTTP listener that listens for internet connections and a SSH listener witch listens for connections only from the local network.
You can't reach the servers SSH port because it's listening for local connections, but what you can do is hack the fridge. You hack the fridge and now you are on the same network as the server so using the fridge as a proxy you can now reach the SSH server.
I hope this makes sense...
Yeah, that makes perfect sense! But why in the world would a fridge have a telnet server?  xD  xD xD Why would you need access to a fridge over the internet?

Simple, you need to lower the temperature to better freeze the bodies so they don't smell, but you're in court so there's no way to get home in time!
True! Although if you're in court, I suppose they probably have a search warrant and you're screwed either way.
"The more we learn, the more we realise how little we actually know"


Reply

RE: Pivoting? #6
(01-06-2017, 08:04 PM)Dr. Keter Wrote:
(01-06-2017, 07:56 PM)insidious Wrote:
(01-06-2017, 07:37 PM)Dr. Keter Wrote: Yeah, that makes perfect sense! But why in the world would a fridge have a telnet server?  xD  xD xD Why would you need access to a fridge over the internet?

Simple, you need to lower the temperature to better freeze the bodies so they don't smell, but you're in court so there's no way to get home in time!
True! Although if you're in court, I suppose they probably have a search warrant and you're screwed either way.

Not if you have a specialized refrigerator! Specially made for storing bodies and hiding from the feds! (Now comes with your very own TelNet Server!)


*I am not responsible for the allegations against any individuals in court or related for murder or otherwise related crimes
(This post was last modified: 01-06-2017, 08:11 PM by insidious.)
[Image: pBD38Xq.png]
Email: insidious@protonmail.ch

Reply

RE: Pivoting? #7
You're at the grocery store and you can't remember if you have any milk left or you need to buy another gallon. You telnet into your fridge and you input the command to check for milk. Even more detailed, you check for weight of current milk to see if it's almost empty.
"If you look for the light, you can often find it. But if you look for the dark, that is all you will ever see.”


Reply

RE: Pivoting? #8
(01-06-2017, 08:22 PM)God Wrote: You're at the grocery store and you can't remember if you have any milk left or you need to buy another gallon. You telnet into your fridge and you input the command to check for milk. Even more detailed, you check for weight of current milk to see if it's almost empty.

More likely future example:

You're at Amazons check-in grocery store and can't remember if you have any milk left or you need to buy another gallon. You log into you're Google account, and go to the "Food Tab". Remember, Google lobbied congress and they're basically our master overlords now, so everything has to be regulated through them because they own a monopoly on all that shit.

Google pings you're house through their database of everything they know about you (Your address, the temperature in your home regulated by NEST, your Google Security System, and of course their patented IoT Home Network-connect software) and pickup your telnetted Refrigerator to check if you have any milk left, finally automatically updating your Google account based on their information.
(This post was last modified: 01-06-2017, 08:37 PM by insidious.)
[Image: pBD38Xq.png]
Email: insidious@protonmail.ch

[+] 1 user Likes insidious's post
Reply







Users browsing this thread: 1 Guest(s)