Firewall Evasion

  • Start with a ping pack and work yourself up from there
  • Use or replace existing services with your own malicious ones
    • e.g.: a Web Server is running, shut it down with service apache2 stop && service --status-all and reuse it port for your own server
  • Flush/Disable the firewall
    • Windows:
      • NetSh Advfirewall set allprofiles state off
      • Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
    • Linux: iptables -F

Relevant Note(s): Penetration Testing