Hacking a Firewall

Hello to everyone on this site. Im a new member and a total noob when it comes to hacking so im loving using this site to increase my knowledge on network security. This is a hobby for me at the moment, I am interested in learning enough to take a CEH qualification, so this is the reason I am now researching, reading white papers and guides trying to digest everything and increase my knowledge in penetration testing and everything associated with it. I have prior experience of HTML but this was in the early days when the internet had its first boom so im a little out of touch now. Im working through the Basic Web Hacks at the moment and am on Basic 6. I have had to use the forums and help to get there but havent felt like i was totally lost. This is my first post on the site and it will be the first of many I have a real interest in this subject and area of the IT world.

So to my question. Im a noob at all this so to get my toes wet my friend advised me to, for a first project get WinSpy on to his pc to gain remote access. I have done but cant successfully get remote access, I disguised the file as a smartftp.exe file and zipped emailed etc. My friend has activated it and I can see an ip and remote connection view. BUT when i try to connect to him, it says that the computer is behind a firewall / router and cannot be contacted

Im aware that getting round a firewall isnt the easiest thing in the world and Im not looking for step by step instruction on how to do it I`m interested to know what methods are employed for bypassing firewalls. An obvious one would be to actually open ports on his router to allow traffic from me to flow through. I have tried this and opened ports 14000, 14001 and 443 on his and my router as recommended by WinSpy but no joy still the same message about it being behind a firewall, probably means I havent set up the port forwarding correctly on either router perhaps. Im stumped it would be great if you could discuss and enlighten me on the subject. I have a Lynksys WAG54GS and my friend has the BT HomeHub. Remember I have opened ports recommended by WinSpy and still cant connect

Thanks for your time, im on level 6 Basic Web Hacking and studying hard !! Great service you guys are running here I support it all the way :D

I suggest you to study the network lrvels and protocols first. Then give a look to "Firewalk" and "firewall piercing". Peace

there are some awesome articles out there. hopefully this one might push you in the right direction. a little taster if you will.

click me

hope it helps necr0six

if it says "behidn firewall", chances are his firewall has popped up saying "smartftp.exe is attempting to listen for connections on port…." and he's clicked "block this program". which means it isnt going to acept any inbound connections.

so this will be of no use at all, what you'll have to do is to code a quick app that disables most common firewalls, then maybe bind it to whatever exe your sending.

that i think would be the easiest and most effective way.

Maybe code something that implements UDP hole punching? Skype gets through most of the firewalls out there using this principle ;)

Thanks for the replies guys. I will have a read over what you have suggested. Its annoying because WinSpy made there software sound so easy to use…..until of course someone has a firewall. Is this company a con or something ? As i said my friend allowed me to open ports on his router to allow me to access through the firewall but it still didn`t work. Think I need to do some hard studying over the next few weeks. Any more suggestions for good reading material would be appreciated.

I have no coding experience at the moment so unfortunatley coding is not an option for me AT the MOMENT !! Im a novice and havent touched any programming languages for a long time.

What are the programming languages that i need to look into ? Just the main ones for bare minumum usage

Thanks once again

Thanks for the replies guys. I will have a read over what you have suggested. Its annoying because WinSpy made there software sound so easy to use…..until of course someone has a firewall. Is this company a con or something ? As i said my friend allowed me to open ports on his router to allow me to access through the firewall but it still didn`t work. Think I need to do some hard studying over the next few weeks. Any more suggestions for good reading material would be appreciated.

I have no coding experience at the moment so unfortunatley coding is not an option for me AT the MOMENT !! Im a novice and havent touched any programming languages for a long time.

What are the programming languages that i need to look into ? Just the main ones for bare minumum usage

Thanks once again

id advise c++ for this sort of thing, its better overall for more computer-logical stuff :)