【安全牛学习笔记】补充Proxytunnel、stunnel4

stunnel4                                       无需修改源代码的情况下降TCP流量封装与SSL通道内 适用于本身不支持加密传输的应用                 支持openssl安全特性                            跨平台                                         性能

yuanfh@Bodhi:~$ sudo apt-get install stunnel4

1.1.1.1  防火墙

External port range: from:other 3306

NAT IP 1.1.1.10

Local port: 3306

save

msfadmin@metasploitable:~$ netstat -pantu | grep :3306

(No info could be read for "-p": geteuid()=1000 but you should be root.)

tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN

wireshark

ip.addr == 192.168.1.11

External port range: from:other 3306; to:3306

root@K:~# mysql -u root -h 192.168.1.11

Welcome to the Mysql monitor. Commands and with ; or \g.

Your MYSQL connection id is 7

Server version: 5.0.51a-3ubuntuS (Ubuntu)

Copyright (c） 2000, 2016 Oracle and/or its affiliate. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or it>

affiliates. Other names may be trademarks of their respective

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement

mysql> show datebases;

+--------------------+

| Database                |

+--------------------+

| information_schema |

| dvwa                          |

| metasploit                 |

| mysql                        |

| owasp10                   |