Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Chris Anley (chris_at_ngssoftware.com)
Date: Tue Oct 22 2002 - 04:37:36 CDT
Here's a bit of code that transmits a file (on a windows box) using time
delays. For example, you could initiate a normal network transfer with the
'transmitting' box (or a series of transfers) - say, downloading from a
web or ftp server - and then measure the time delays using a packet sniffer.
It also works as another type of covert transmitter - the 'processor
usage' local transmitter that's mentioned in a lot of the covert channel
literature. One difference here is that it's a 'foreign' process that's
being manipulated. The downside is that you need some privs to access
the process you're manipulating (but that's not really the point, as
discussed previously in this thread).
You could do this in exploit code pretty easily. You could also make this
a lot harder to detect - right now it's pretty dumb.
Anyway, it's not intended as an actual transmitter, more just an
- TEXT/PLAIN attachment: transmit.c