search

stealth / sshttp

SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
http://c-skills.blogspot.com
869 stars 97 forks source link

Domain Fronting? #12

Closed Viss closed 7 years ago

Viss commented 7 years ago

Is it possible to use sshttp with cloudfront or other providers for domain fronting? It would be pretty rad to have "https traffic flowing to a0.awsstatic.com", that is domain fronted to another front end, like an ec2 or digital ocean image, and have the traffic be ssh.

Because at that point, you could tunnel ssh ports over that link and do c2 and exfil comms over "amazons front end".

stealth commented 7 years ago

I expect such providers to sanitize or at least check/verify the TLS/HTTP traffic. Thus, I dont think that it would be possible to simply forward SSH. You would need to encapsulate SSH inside HTTPS and untunnel it at the end. Thats not the aim of sshttp. You can use your standard HTTPS tunnel tools for this.