Posts

Showing posts with the label http proxy

Open ssh connection through proxy with NTML authentication

Image
Here is the explanation of how to pass a ssh connection through a proxy that use NTLM authentication protocol (cryptographic authentication) instead of a plain login/password authenication. First follow the steps describes here : http://blog.mansonthomas.com/2008/01/open-ssh-connection-through-http-proxy.html Next we have to deal with NTLM authentication. Putty do not know how to talk with proxy that use NTML authentication, so we need a soft that will handle the authentication and encapsulate the network packet. To do that we'll use cntlm which is a port of an unix programms using cygwin (no need to make a insall of cygwin though...). Once you unzip the files, edit the configuration file cntlm.ini You have to change 4 values : login: Your Windows login name domain: Your domain name You can get theses information by hitting CTRL+ALT+SUPPR, a window display and in the first fieldset you can see something like "Thomas Manson has opened a session as DOMAIN\LOGIN" proxy u...

Open a SSH connection through an http proxy and dig tunnels :)

Image
I'm working for an IT Services & Software Engineering company, and I often work for some time (3 months to a year) by the client company's office... And often, I'm behind a ****ing proxy that filters http request, provide antivirus analysis etc.. Useful for the company securtity and efficiency, but really borring for me. Those proxy allows http (tcp/80) and https (tcp/443) connections and nothing else... So no tcp/22 for SSH, and I miss it really much for many reasons. So here is what to do, to get an SSH connexion to a linux box. But beware that doing that will certainly break the security contract you signed when you enter the company. Doing that allow you to bypass the content filtering and security. And you could be fired for that... This blog post will show you how to bypass an http proxy with a basic authentication. The following post will show you a way to bypass a proxy with NTLM authentication mecanism. Server configuration You're a geek like me, so you hav...