|
|
The functionality is actually quite trivial (which is probably the reason why there seems to not be a single tool that does what this tool does): it opens a local TCP port (bound on localhost), waits for a single incoming connection and than connects to the preconfigured HTTP proxy and instructs the proxy to connect to the intended target system; all data is now relayed from OTTP to the HTTP proxy to the target, thus creating a seamless proxy connector - for lack of a better word. A usage scenario might be a user within an internal network who wishes to use (and hopefully has authorization to do so) a given Remote GUI application (like those based on the VNC and RDP protocols) to connect to a system on the Internet, but must do so via a HTTP proxy. Unless the application in question already supports connections via a HTTP proxy there'd only awkward solutions like the use of SSH port forwarding you'd be out of luck. OTTP essentially prefixes the applications TCP network stream with the required HTTP proxy syntax to have the proxy connect to the target.
As for security concerns, one should never use tools like OTTP or SSH (in terms of using the port forwarding capabilities) without proper permissions; on the other side, administrators should keep the CONNECT'able ports to a minimum (like 443 only for HTTPS) on their proxies.
Click here to download a ZIP file containing:
- Compiled binary (plus a basic start script)
- Source code
- Project File for Dev-C++
You can contact me about this tool: jpabel is the username, akkaya the domainname and the TLD is de. |
|