SecurityHunk

In most of the institutions and companies due to security risk many restrictions are being imposed on network like blocked ports etc.There are many ports that are blocked for outbound connection and few ports for http connection are opened so that people working over there can access there email etc.As the http port outbound is opened so it can be used for http tunnel to access restricted applications like IM etc.In this post we will see how we can do that and also see the available http tunneling Software packages.

What is Http Tunnel?

It is a technique in which the communications that are restricted in the network are bundled within the http protocol and allowed to communicate.The user uses a http tunnel software with client-server but to use it with administrative privileges.

How it works?
The user need a http_Tunnel-client and a server other than the original client-server.What happens that when the original_client decides to connect to a desire server then it sends its request through the httptunnel_client to the httptunnel_server then to the original_server as shown in the figure below.
 Actually the restricted application that is the client(in the figure) sends a request other than http through the http tunnel_client bundle inside the http request.Then the http tunnel_server receives its unwrap,decrypt,uncompressed it and forward it to the original server in the same way the data is transferred.The main concept over here is that there is middle (client-server) other than the original client-server.

Advantages:
1.Undo restrictions on applications like instant messengers etc

2.Helpful in accessing restricted pages and sites.

3.May be helpful in bypassing firewall  restriction but not in an extensive manner.

Lets see how we can use http tunneling.

Http Tunneling Software:

1.Http-Tunnel(Download)

2.HttpTunnel(Download)

3.Hopster(Download)

4.Super Network Tunnel(Download)

5.HttpTunnel(Linux)(Download)

Requrirements:

1.Http Tunneling Software(Client-server)

2.Administrative Previlage.

Procedure:

Step 1.
Here I have used the soft named HttpTunnel for tunneling with both server and client.Download and install it.

Step 2.
Now click on the client and server part of it and you can use port mapping or socks5 for connecting thought the client.
Step 3.
Here I have used Rediff bol as a restricted application and socks5 for connecting.As you set the settings click on "Test" to see if it could connect ot the server,if it is successful then proceed as shown below.
Http tunnel in the network can be still detected by analyzing the data and packets in the network.On more thing is that http connections last for less interval of time but since in http tunnel with tcp protocol bundled in side it may last for extended period of time so it may create a suspicion in the mind of the network administrator.

How you will feel when you come to know someone spying on you ,what you do online....what sites you visit...keeping  track of  all your  web history....!!!It will certainly hit you back...so today  I am going to discuss about VPN services  and tell how   you can hide yourself while  browsing.

What is VPN?

VPN(Virtual Private Network)  establish an extremely secure and private connection between you and the network to which you are connecting....it also  protects your network from being intercepted by creating a virtual tunnel but these are mainly used for anonymous purposes as  you can hide your web activities from your ISP.Data here is encrypted  by  public key encryption &  symmetric key encryption so it is quite secure and  at the same time user friendly. 

VPN vs Proxy  which one is better  and why?

As i have talked about proxy in detail in one of my post so i will just touch fews points here.Proxies are also used for surfing anonymously but  but it does not encrypt the source and destination address rather it acts like a filter.Here the whole connection is not made private  but proxy functionalities are applied to few software and browsers where it is  configured .

But VPN is more secure and user friendly compared to proxy.It makes the whole connection private rather than  concentrating of  particular applications as in proxy.So, i feel VPN is a better option compared to proxy but if one is planting an attack so he/she has to use  both proxy and VPN for it.

Here I am going to list out few of the VPN services available online.

1.CyberGhost:It is not a free VPN but has a free bandwidth limit upto 10GB for one month and there are paid services for registered users also,since it is a German based website so all the servers are aslo of Germany.
Website:http://cyberghostvpn.com/
Download:http://cyberghostvpn.com/page/download.php

2.ItsHidden:It provides a free bandwidth of 7GB,it has no complicated software to  install  and 128 bit secure connection to ensure privacy over all networks.
Website:http://itshidden.com/
How to Setup

3.UltraVPN:It is very easy to use and install.It is an opensource SSL VPN solution based on OpenVPN.It supports large number of encryption system.It is a French  client that allow upto 500kb/s depending on the connection.
Website:http://www.ultravpn.fr/
Download:http://www.ultravpn.fr/download.htm

4.JAP:It is written in Java language and it is a German based client and it is quite effective  service.It is very easy to install and one click connection setup.
Website:http://anon.inf.tu-dresden.de/index_en.html
Download:http://anon.inf.tu-dresden.de/download_en.html

5.HotSpot Shield:It is one of the widely used free VPN service.It secures data,online shopping and personal information like email  by HTTPS encryption.One thing i really hate about this service is the Ad  that comes on the top of the browsing page.
Website:http://hotspotshield.com/

6.Packetix.Net:It is a Japanese based technology that provide reliable and fast service.It is easy to install and very user friendly.Only you have to download the installation file and run it by proper settings.
 Website:http://www.packetix.net/en/ 
Download:http://www.packetix.net/en/secure/install/

7.Gpass:Its really fast and is on of the hyped service in China.It helps to bypass network censorship by tunelling network traffics.It supports encrypted sock tunnels and backup tunnels using skype and tor
 Website:http://gpass1.com/gpass/
Download:http://gpass1.com/gpass/download-en

8.The Free VPN:It provides VPN services from different countries like usa,china,italy,canada,uk,sweden etc...It also protect you from snoopers at wi-fi hotspots,hotels,airports etc.
 Website:http://thefreevpn.com/ 

I hope this post will help you all a bit and if you find this post worth reading  do  drop a comment...... :)

The proxy server has its pros and cons so, we are going to discuss it and then i will list few free unblocked proxy sites.

Advantages:
  
1. If  it happens that the remote server/web server from where you are requesting any data has filtered out your IpAddress in that scenario you cannot access that particular data but if you had accessed that data before through a proxy then there are chances that the proxy server must have stored that  data in it which is called cache,it can be accessed now if you connect through the proxy server.

2. It is also used to enhance privacy and security while surfing by using anonymous proxies.

3. Proxies can also sometimes be used to speed up the browsing and access of data in a network because for caching as described above. 

4. Proxies are also used for bypassing blocked sites in schools, office and also access parental blocked data.

5.It is also used for keeping log ie. web history of the users connected through it.

6. Proxies can prevent your system from getting hacked. 

Proxy Tools  &  server Sites  available:
There are many proxy tools available but I would list few of them........

1.JAP:
It provides the functionality to surf the web without being observed. This means that neither the requested server nor any observer on the Internet can know which user has viewed which web page.
(Download)

2. ProxyWay:
It provides easy to scan proxy lists, check proxy, filter and change proxy servers on time specified basis. The most important advantage about it is that one can create proxy chains and easily changes them on fly.
(Download )

3.Proxy sites:



>PassAll

>SurfProxy

>FilterBay

>Proxify


Disadvantages:

1. Caching no doubt will increase the data access speed but at the same time the proxy server owner can  keep a look on the cache and there he/she can find  many sensitive  data like passwords, username, web browsing history etc.(Read a Problem Report)

2.Even if a person is using an anonymous proxy and he/she is on encrypted connection/network still then there are techniques for intercepting both TLS and SSL encrypted connections. 

3.Tunnelling proxy servers are useful in access blocked site but students are able to access blocked sites, offensive material, internet pornography etc in schools and colleges.

Note:It is advisable  to use proxy server which has trusted and a clear  privacy policy and never use private data like username and password through proxy even if it is encrypted also.