[2007/11/14] New paper mirrored: "Protocol Hopping Covert Channels" (2007) [2007/10/06] New AF version - 0.8.4 [2007/09/20] New paper mirrored: "Real-Time Steganography with RTP" (2007) [2007/09/04] New GW Paper: "g00gle CrewBots" New GW project: "g00gle CrewBots - 1.0" [2007/07/10] New paper mirrored: "XSS Tunneling" (2007) [2007/07/06] New paper linked: "Sistema de deteccao de backdoors e canais dissimulados" (2005) [2007/06/25] New paper linked: "Covert Channel Analysis in TCP/IP networks" (2007) (introduction paper) New website referenced: "http://caia.swin.edu.au/cv/szander/cc/index.html" [2007/02/16] New tool mirorred: "dns2tcp-0.3.tar.gz" [2007/01/10] New poc : trt-scapy [2007/01/09] New GW Team member : Matteo Italian version of the site. New paper linked: "Keyboards and Covert Channels - JitterBugs" (2006) [2006/12/20] New paper mirorred: "Application Layer Covert Channel Analysis and Detection" (2006) New tools mirorred: "PingTunnel" "IcmpTX" "Itun" [2006/12/12] New tools mirorred: "tcpstatflow_v1.1.tgz" and "snort_covered_channels_detection.txt" [2006/12/05] New tools mirorred: "rcovert-0.1.tar.gz" and "pyrawcovert-0.1.tar.gz" [2006/11/28] New tool mirorred: "tentun-1.0.tar.bz2" [2006/11/22] New AF version - 0.8.3 [2006/11/13] New paper mirorred: "The Dining Freemasons" (2005) [2006/09/20] New tool mirorred: "Hcovert" [2006/09/18] New AF version - 0.8.2 [2006/09/10] New papers mirorred: "An Evaluation Framework for the Analysis of Covert Channels in the TCP/IP protocol suite" (2005) "Adaptation and Performance of Covert Channels in Dynamic Source Routing" (2003) "Covert Channel Analysis and Detection with Reverse Proxy Servers using Microsoft Windows" (2004) "Covert Channels in Internet Protocols: A Survey" (2005) "Data Exfiltration and Covert Channels" (2006) "Data Hiding in Identification and Offset IP Fields" (2005) "Eraser: An Exploit - Specific Monitor to Prevent Malicious Communication Channel" (2004) "HICCUPS: Hidden Communication System for Coruppted Networks" (2003) "Quasi-Anonymous Channels" (2003) "Syntax and Semantics-Preserving Application-Layer Protocol Steganography" (2004) "The b2/c3 problem: how big buffers overcome covert channel cynicism in trusted database systems" (1994) "The Pump: A Decade of Covert Fun" (2005) and you can sort by year/title; [2006/09/05] New GW paper: "How to cook a covert channel"; New GW project: "Cooking channels - 1.1" [2006/07/18] New papers mirrored: "Caracterisation des canaux caches en logique temporelle alternante" [fr] (2005) "Scenarios and Covert channels: another game..." (2004) "IP covert timing channels: design and detection" (2004) (reference => mirror) "Web Tap : Detecting Covert Web Traffic" (2004) (reference => mirror) "New covert channels in HTTP: adding unwitting Web browsers to anonymity sets" (2003) (reference => mirror) [2006/05/07] New WebShell version - 2.2.2 [2006/04/27] New paper mirrored: "Detecting NUSHU Covert Channels Using Neural Networks" (2005) [2006/04/19] New paper mirrored: "Detection of Covert Channel Encoding in Network Packet Delays" (2005) [2006/04/07] New AF version - 0.8.1 [2006/04/04] irc.gray-world.net:6677 is back [2006/03/27] New gray-world.net mirror: http://jeremian.info/gray-world.net/ [2006/02/19] New papers mirrored: "Establishing Big Brother using covert channels and other covert techniques" (1997) "Covert Channels for Collusion in Online Computer Games" (2004) [2006/02/17] New paper mirrored: "Research Report: Covert Channels 2005/2006" (2006) [2006/02/06] New AF version - 0.8 [2005/12/27] New paper mirrored: "Detecting HTTP Tunneling Activities" (2002) [2005/12/01] New GW paper: "Covert channels through the looking glass"; New PoC added : HttPostNG [2005/11/17] New AF version - 0.7.5 [2005/11/07] New AF version - 0.7.4 [2005/10/24] New link added : http://www.cr0.net:8040/code/network/mirkov4-1.1.zip [2005/09/16] New papers mirrored: "A Pump for Rapid, Reliable, Secure Communication" (1993) "A Network Pump" (1996) [2005/09/02] New papers mirrored: "Covert Channels in TCP/IP Headers" (2002) "Eliminating Steganography in Internet Traffic with Active Wardens" (2002) "Embedding Covert Channels into TCP/IP" (2005) "Covert channels and anonymizing networks" (2003) "New covert channels in HTTP: adding unwitting Web browsers to anonymity sets" (2003) "Practical Data Hiding in TCP/IP" (2002) [2005/08/26] New (old) papers mirrored: "A Note on the Confinement Problem" (1973) "Departement of Defense Trusted Computer system evaluation criteria - 5200.28-STD" (1985) "Extension to 5200.28-STD to trusted network systems and components" (1987) [2005/08/08] New AF version - 0.7.2 [2005/07/12] New AF version - 0.7.1 Board update [2005/06/10] New AF version - 0.7 [2005/04/13] New GW Team member : Andreas New paper added: "Web Tap : Detecting Covert Web Traffic" (google it) [2005/04/12] New papers added: "IP covert timing channels: design and detection" (google it) "Covert channels detection in protocols using scenarios" [2005/04/01] Board is back [2005/03/24] New paper added: "L O K I 2 (the implementation) for Phrack 51" [2005/03/15] New AF version - 0.6 [2005/02/21] New papers added: "~Whispers On The Wire~ Network Based Covert Channels Exploitation & Detection" "Malacious ICMP Tunneling : Defense Against the Vulnerability" "The Implementation of Passive Covert Channels in the Linux Kernel" New links added: http://ksb.sourceforge.net/ (Kernel Socks Bouncer) http://l7-filter.sourceforge.net/ [2004/11/19] New AF version - 0.5.5-p1; [2004/10/18] New AF version - 0.5.5; New public IRC server: IRC://irc.gray-world.net:6677/gray-world.net New links added: http://tigerteam.se/dl/sbd/ (Shadowinteger's Backdoor) http://tigerteam.se/dl/rrs/ (Reverse Remote Shell) http://www.sharp-ideas.net/archives/000048.html (Monkey Shell) [2004/08/25] Board moved to the new 195.137.249.92 GW server. [2004/07/15] New WebShell version - 2.2.1; New link added: http://urcs.unmanarc.com/ [2004/06/11] New GW Team member : Ilya Zelenchuk; New PoC added : Skeeve; [2004/06/02] New AF version - 0.5.4; [2004/04/24] Public irc channel created: IRC://irc.0x557.org:3331/gray-world.net [2004/04/18] New CCTDE version - 0.2; New link added: http://sourceforge.net/projects/ntlmaps/ [2004/04/14] New links added: http://www.klake.org/~jt/dnshell/ http://ftester.sourceforge.net/ [2004/04/07] New paper added: "Rootshell with icmp_rcv() Hooking" [2004/03/31] New GW paper: "Reverse Tunneling Techniques: theoretical requirements for the GW implementation"; [2004/03/30] New GW Team member : Zhao Wei; [2004/02/09] New links added: http://search.cpan.org/src/BOOK/connect-tunnel-0.03/ http://dhirajbhuyan.hypermart.net/ftp-tunnel.html http://freshmeat.net/projects/reverb/ http://desproxy.sourceforge.net/ http://www.pyrexic.com/hirosh/eos-india/misc/recub.htm [2004/02/06] New GW Team member : Arun Darlie Koshy; New GW Team member : Mehmet; New project added: CCTDE [2004/01/30] Web site Legal Notice added; [2004/01/12] New AF version - 0.5.3; The papers page now has a RFC section; [2004/01/09] New GW paper: "A Forensic Analysis: HTTP Protocol"; [2003/12/23] New Msnshell version - 1.1; [2003/12/21] The Polish version of the site; [2003/12/17] New project added: Active Port Forwarder [2003/12/15] New GW Team member: Jeremian New papers added: "Covert Channel Analysis", "Information Hiding - a Survey", "Quantifying Information Flow", "Covert Channels Here to Stay?", "Simple Timing Channels", "Discussion of a Statistical Channel"; New links added: http://www.geocities.com/fryxar/ http://www.outguess.org/ [2003/12/04] GW mirrors list added. [2003/12/01] New GW Team member: Javier Martinez Marti The Spanish version of the site; [2003/11/28] New links added: http://fare.tunes.org/files/fwprc/ http://cqs.dyndns.org:81/socks/ New paper added: "Covert Channel Analysis and Data Hiding in TCP/IP" [2003/11/25] The paper "Covert Channel and Tunneling over the HTTP protocol Detection: GW implementation theoretical design" updated. [2003/11/14] The PhpBB board updated to 2.0.6; [2003/10/16] Chinese and Russian versions of the site; [2003/10/08] New Gray-World site design; New WebShell version (2.1.0) added; New Firepass version (1.1.2a) added; New current working version of the cctde paper on http://team.gray-world.net/public/ New links added: http://www.tvsg.org/ups/ (Thanks to AutoNiN), http://www.phenoelit.de/stuff/cd00rdescr.html and http://cmn.listprojects.darklab.org/ (Thanks to Richard). New papers added: "Infranet: Circumventing Web Censorship and Surveillance", "The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments" [2003/09/03] New project added: MsnShell New CCTT minor revision version added. [2003/09/02] New GW Team member: Wei Zheng New link added: http://revinetd.sourceforge.net/ [2003/08/17] New links added: http://httppc.sourceforge.net/ http://cmn.listprojects.darklab.org/ http://transconnect.sourceforge.net/ http://sourceforge.net/projects/transproxy/ [2003/07/25] New link added: http://www15.brinkster.com/nick102799/insider/ [2003/07/22] New tool added: /tools/hping2.0.0-rc2.tar.gz [2003/07/21] New GW paper: "Covert Channel and Tunneling over the HTTP protocol Detection: GW implementation theoretical design"; New GW website design; [2003/07/17] CHANGELOG file created