Ultrasurf?

[huzeyfe.onal at gmail.com (Huzeyfe ONAL(Gmail))]

Hi,

ultrasurf doesn't use SSL but Wireshark vs recognized it is a SSL. I run
Ultrasurf over proxy(Squid) and watch access.log, it just connects to Ip
addresses not host addresses. Thus i wrote a access list to Squid which'is
blocking SSL requests(via CONNECT) to non domain addresses.

There's 1 year old but informative article here ->
http://www.m86security.com/kb/attachments/Ultrasurf-GUID78cf6064c4d04affa2e177bc01284be4.pdf
---
Huzeyfe ONAL
Ag Guvenligi Listesine uye oldunuz mu?
http://www.lifeoverip.net/netsec-listesi/

---


On Mon, Oct 26, 2009 at 9:38 PM, Adrian Crenshaw <irongeek at irongeek.com>wrote:

> As many of you know, I've been researching darknets. While not quite the
> same thing, I've been looking at http://www.ultrareach.com/ which I found
> via a Slashdot story. This is the first I've seen of it, but I'm having
> problems finding tech info on it. Anyone work with it? I've thrown a sniffer
> on it, and it seems the out tunnel is on 443 and may be using SSL (hard to
> say, the could be rolling their own encryption and just using the 443/tcp
> port). Anyone know more about the group putting this out?
>
> Thanks,
> Adrian
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091027/28d36202/attachment.htm