| Pages: [1] :: one page |
|
|
| Author |
Thread Statistics | Show CCP posts - 1 post(s) |
Maximillian German
Spectres Syndicate
53
   |
Posted - 2013.08.26 19:59:00 -
[1] - Quote
I expect Doc Fury to be along any minute now, so I'll make this quick. Basically, I've thrown together a quick and dirty website that makes it easier to browse the forums undetected at work. It consists of 2 iframes, each of which 'stream' from other webpages. The first 'distraction' iframe takes up most of the screen space, and is always visible. If you click on a link, however, you will navigate away to a new page. The second, smaller iframe, 'streams' the eve forums webpage. What makes this frame different, however, is that it disappears when you take your mouse off of it and reappears when you put your mouse back on it. Unlike the distraction frame, clicking on a link in this frame will only change the page being streamed. The overall page won't change. Dunno why that is, but it works. Feel free to use/modify the source to fit your needs. I'll keep working on it and hopefully have a more elegant solution soon. Hopefully someone will get some use out of this.
Covert Eve Forum Browser
edit: The distraction page is currently tailored to programmers. You have to scroll all the way to the bottom and mouse over the white space for the eve portion to appear. A simple html edit will switch the top page to whatever you need it to be. |
|
ISD LackOfFaith
ISD Community Communications Liaisons
600
|
Posted - 2013.08.26 20:38:00 -
[2] - Quote
Eve Technology Lab is tha--*ahem*
Thread has been moved to EVE Technology Lab.
You might want to work on masking the URL better if you want to be truly covert. A system administrator can still look at "evebrowser.site40.net" and see something that you probably shouldn't be doing at work.
ISD LackOfFaith
Lieutenant
Community Communication Liaisons (CCLs)
Interstellar Services Department |
|
Maximillian German
Spectres Syndicate
53
|
Posted - 2013.08.26 20:47:00 -
[3] - Quote
true, I meant it more as look-over-the-shoulder protection. If i'm going to make it more secure, I'll probably end up either subscribing to the forums' RSS feed and parsing that or just parsing the html of the page itself to pull the posts. But that is a little more than I can just throw together at the moment :) Also, you can copy and paste the code into your own local drive and call it whatever you want. however, a decent sys admin would catch on rather quickly to that as well. I simply hosted the page on site40.net because it was the first free hosting site i found. |
Steve Ronuken
Fuzzwork Enterprises
Vote Steve Ronuken for CSM
1832
|
Posted - 2013.08.26 22:16:00 -
[4] - Quote
The forums being on SSL make them somewhat more difficult for a sysadmin to detect.
Unless they're MITMing you, they're not going to see the hostname in the requests (just the initial dns lookup, then the IPs).
A sysadmin with a clue what they're doing will still be able to see what you're doing, of course. SSL doesn't help, when you can't trust your client. And at work, your client belongs to the sysadmin.
Though what you could do is look at the fingerprint of the certificate. If you're being MITMed it won't match the real one. FB:59:7C:42:07:64:A1:FF:09:A7:CE:1B:80:9A:E8:26
Still not entirely trustworthy, but /now/ we're beginning to get into paranoia territory.
Steve Ronuken for CSM 9!-á I'm starting early :)
Handy tools and an SDE conversion
Twitter: @fuzzysteve on Twitter |
Caviar Liberta
Moira.
Villore Accords
144
|
Posted - 2013.08.27 00:55:00 -
[5] - Quote
Steve Ronuken wrote:The forums being on SSL make them somewhat more difficult for a sysadmin to detect.
Unless they're MITMing you, they're not going to see the hostname in the requests (just the initial dns lookup, then the IPs).
A sysadmin with a clue what they're doing will still be able to see what you're doing, of course. SSL doesn't help, when you can't trust your client. And at work, your client belongs to the sysadmin.
Though what you could do is look at the fingerprint of the certificate. If you're being MITMed it won't match the real one. FB:59:7C:42:07:64:A1:FF:09:A7:CE:1B:80:9A:E8:26
Still not entirely trustworthy, but /now/ we're beginning to get into paranoia territory.
of course if you really want to be covert, you could say you need to remote log in to your machine at home and mask any of your browsing activity that way.
|
Maximillian German
Spectres Syndicate
53
|
Posted - 2013.08.27 12:16:00 -
[6] - Quote
I think he just meant that the url of the site im hosting it on is a bit obvious.
|
|
|
| |
|
| Pages: [1] :: one page |
| First page | Previous page | Next page | Last page |