Reverse-WWW-Tunnel-Backdoor is a Perl program demonstrating backdoor placement through firewalls based on the research paper of the same name.
THC-RWWWShell is a Perl program designed as a proof-of-concept for the paper "Placing Backdoors through Firewalls". This program enables users to communicate with a shell through firewalls and proxy servers by imitating web traffic. The application utilizes a reverse master/slave relationship, which removes the need for listening ports on the target machine.
THC-RWWWShell has been tested and verified to work on a variety of operating systems, including Linux, Solaris, AIX, and OpenBSD. However, there are some known bugs that users should be aware of. For example, on certain Solaris machines, select(3) is broken, making the program inoperable. Additionally, Perl's recv function is also broken on AIX and OpenBSD, preventing proper receive checks that could identify and address issues.
Despite the bugs, the program comes with workarounds implemented. In the latest version, the HTTP 1.0 protocol compliance has been improved, which results in a more stable and efficient experience for users. Overall, THC-RWWWShell is a useful tool for those who need to bypass firewalls and communicate with a shell while utilizing a reverse master/slave relationship.
THC-RWWWShell has been tested and verified to work on a variety of operating systems, including Linux, Solaris, AIX, and OpenBSD. However, there are some known bugs that users should be aware of. For example, on certain Solaris machines, select(3) is broken, making the program inoperable. Additionally, Perl's recv function is also broken on AIX and OpenBSD, preventing proper receive checks that could identify and address issues.
Despite the bugs, the program comes with workarounds implemented. In the latest version, the HTTP 1.0 protocol compliance has been improved, which results in a more stable and efficient experience for users. Overall, THC-RWWWShell is a useful tool for those who need to bypass firewalls and communicate with a shell while utilizing a reverse master/slave relationship.
What's New
Version 2.0: N/A