Author Topic: Overly excessive restrictive corporate proxy  (Read 662 times)

0 Members and 1 Guest are viewing this topic.

Offline retghy

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Overly excessive restrictive corporate proxy
« on: September 08, 2014, 02:13:26 am »
Hello to all.

I live in south America. I spend 12hours a day working for a corporation related to oil extraction, mostly my work is attending failures in S.C.A.D.A. system and also designing new screens needed according to field needs.

Sometimes I need to research information to accomplish certain task, like for example configuring new devices (PLC), or learning how to do something in Java (that's the programming language used to program the HMI of the software I use), well the IT department here is big, it is a nation wide corporation and they don't seem to care of what people need, even if that affects how the work is done.

The thing is this http proxy I have tried to bypass it but each time it seems more and more restrictive, I work under Debian Linux Distribution (Version 6.04 Squeeze).

As you can imagine, every website, service, program related in any way or that evens mentions the word proxy it is blocked (tor, hola.org, cocoon, online proxys of any kind), actually I believe all ports are closed when trying to connect to an external address with the exception of course of 80 port that is used by the http proxy.

The proxy used is squid.

I can try all recommendations given here but of course this website it is also blocked so I could tell you how it went the day after.

Is there a way to encrypt all traffic via port 80 somehow? making it impossible for the proxy detection mechanism to know what website is being visited.

I've tried making a SSH tunnel, but I cannot even ping external IP.

I'm asking more for guidance on how to accomplish this, I like to read and learn new things everyday, I know my way in Linux but I'm not by any means an expert. I see this more like a challenge.

Thanks for reading and thanks again for any help in advanced.


Offline shad0wingfir3

  • Serf
  • *
  • Posts: 40
  • Cookies: 4
    • View Profile
Re: Overly excessive restrictive corporate proxy
« Reply #1 on: September 08, 2014, 06:19:41 am »
I don't have any familiarity with corporate firewall/proxies, is it not possible to temporary disable it on your end while you browse? Or is it a VPN and the proxy is maintained remotely?

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Overly excessive restrictive corporate proxy
« Reply #2 on: September 08, 2014, 07:44:16 am »
If you can connect with upstream DNS servers you can tunnel traffic over DNS.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline retghy

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Re: Overly excessive restrictive corporate proxy
« Reply #3 on: September 09, 2014, 01:05:05 am »
I don't have any familiarity with corporate firewall/proxies, is it not possible to temporary disable it on your end while you browse? Or is it a VPN and the proxy is maintained remotely?

Hello, the proxy is maintained remotely, I need to open the browser settings and specicy the proxy address, once I try to access any website it ask for my username and password. That is the way it works, it cannot be disabled clientside.

Thanks for your reply.

Offline retghy

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Re: Overly excessive restrictive corporate proxy
« Reply #4 on: September 09, 2014, 01:13:00 am »
If you can connect with upstream DNS servers you can tunnel traffic over DNS.

Could you please elaborate on that?

Do you mean using some service like Open DNS or Google DNS?

The company have their own DNS servers.

I'll research more about those upstream DNS you mention.

In the past I was able to use a firefox addon named Cocoon, that tunneled all traffic trough their servers first and it was transparent to the proxy because it all happened in the web browser.

Sadly they blocked all the IP of the Cocoon login services.
« Last Edit: September 09, 2014, 01:15:27 am by retghy »

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Overly excessive restrictive corporate proxy
« Reply #5 on: September 09, 2014, 06:36:50 am »
Could you please elaborate on that?

Do you mean using some service like Open DNS or Google DNS?

The company have their own DNS servers.

I'll research more about those upstream DNS you mention.

In the past I was able to use a firefox addon named Cocoon, that tunneled all traffic trough their servers first and it was transparent to the proxy because it all happened in the web browser.

Sadly they blocked all the IP of the Cocoon login services.
Yes and no, if you are able to connect to UDP port 53 upstream, so outside the network you are in then you might be able to setup a box on the webs to connect to.
You can than tunnel all the traffic to that 'DNS server'.
Check out the iodine project:
http://code.kryo.se/iodine/
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage