Disabling firewall on an attacked host sounds trivial to detect. Is there any sp... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		d33 on May 29, 2016 \| parent \| context \| favorite \| on: Writing my first shellcode Disabling firewall on an attacked host sounds trivial to detect. Is there any specific reason why wouldn't you deploy meterpreter instead?

Retr0spectrum on May 29, 2016 [–]

A properly configured firewall wouldn't allow anything except, for example, inbound traffic on port 80. If you wanted to start some kind of reverse shell, you would first need a hole in the firewall.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact