Home / EN / Firewall / Framework / Linux / Tunna / [Tunna Framework] Tool designed to bypass firewall restrictions on remote webservers

[Tunna Framework] Tool designed to bypass firewall restrictions on remote webservers

| Post sponsored by FaradaySEC | Multiuser Pentest Environment

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. The web application file must be uploaded on the remote server. It will be used to make a local connection with services running on the remote web server or any other server in the DMZ. The local application communicates with the webshell over the HTTP protocol. It also exposes a local port for the client application to connect to.

Since all external communication is done over HTTP it is possible to bypass the filtering rules and connect to any service behind the firewall using the webserver on the other end.

 Tunna framework

Tunna framework comes witht he following functionality:

SECFORCE - penetration testing Ruby client - proxy bind: Ruby client proxy to perform the tunnel to the remote web application and tunnel TCP traffic.
SECFORCE - penetration testing Python client - proxy bind: Python client proxy to perform the tunnel to the remote web application and tunnel TCP traffic.
SECFORCE - penetration testing Metasploit integration module, which allows transparent execution of metasploit payloads on the server
SECFORCE - penetration testing ASP.NET remote script
SECFORCE - penetration testing Java remote script
SECFORCE - penetration testing PHP remote script


[Tunna Framework] Tool designed to bypass firewall restrictions on remote webservers [Tunna Framework] Tool designed to bypass firewall restrictions on remote webservers Reviewed by Zion3R on 8:47 PM Rating: 5