Matasano PFI (as seen on TV!)
Aug 27, 2009 at 1:32PM stephen Do you ever find yourself on a reversing or pen-testing project with the need to peek into a TCP stream and modify a little bit of data?
Do you find yourself annoyed, feeling that you’ve hacked together code to do this many times before, but simply can’t find it?
Do you find yourself hobbling together other tools to do what you need? Do you find yourself wishing you had a Burp for raw TCP connections?
No MORE! Using Matasano’s Port Forwarding Interceptor you have the tool you need right at your fingertips! Lets take a closer look at this exciting new tool shall we?
Let’s say you are watching your favorite 15 minute ANSI art rendition of Star Wars on telnet://towel.blinkenlights.nl . You think to yourself:
“Man I sure wish I could get in-between my telnet client and the server and begin reversing this Star Wars protocol”.
Then you remember you got Matasano’s PFI off of Github earlier today!
You take a look at the usage and it seems pretty self explanatory…
So then you decide to try it out by running something like this:
(This sets up PFI as a TCP port forward listening on the loopback interface on port 23 and forwarding traffic to towel.blinkenlights.nl on port 23, but you knew that already of course, thats why you ran it…)
You are then greeted by the comforting and familiar PFI GUI windows. And hey, you didn’t even have to install any weird python modules or dependencies!
You take a minute to notice how simple and self-explanatory it all is. One window displays the intercepted text, and allows you to choose whether to intercept. The other window allows you to edit the intercepted data before it is passed on through the tunnel. How easy! It is like a “Burp” for raw TCP!
You then decide to try it out by connecting through the tunnel:
And begin watching your ANSI art show:
So the tunnel works! You look back at your PFI main window and see that data is in fact passing through PFI.
You select the “Intercept” check boxes and begin intercepting and editing data across the tunnel.
And as you begin reversing the complex ANSI Star Wars protocol you cant help but feel yourself awash with gratitude that Matasano PFI saved you the trouble of having to dig out all your old scripts and programs. You give your monitor a thumbs up and say: “Thanks PFI!”
Then you remember that Matasano Blackbag also had a similar tool (called replug) and then you feel silly, not just about neglecting Blackbag but also that you gave your monitor a thumbs up.
Reader Comments (52)
Well thanks for the 10 lines of code it takes to do a poll loop on an in/out connection (aka simple tcp proxy loop) that halts for buffer editing on every iteration. Good work.
Sorry but i could not download your PFI tool neither the blackbah suite.
thanks
Juicy clothes
Buy full line Juicy couture products from our site at a low price to make yourself a fashionista! Dress juicy couture clothing, holding juicy couture
Shop prom dresses, formal dresses, prom shoes, 2010 designer prom gowns at dres4sale.
for cocktail dresses, dresses for prom, homecoming dresses, and evening dresses. Cheap prom dresses or couture designer evening gowns for your next formal.
evening dresses
Evening Dresses. Women's Formal & Special Occasion Dresses ... Welcome to Cheap Evening Dresses for Sale! ... Buy Cheap Evening Dresses Sales & Accessories
prom dresses
I think this is so good to use. I think this is definitely the future. I would push this more and more in the future.
resume format
I guess that to get the mortgage loans from creditors you ought to have a good reason. Nevertheless, one time I have got a auto loan, just because I was willing to buy a house.
I loved
This works so well. I think you did an awesome job with it. Keep up the good work.
denver mesothelioma lawyers
P90x .It really is not expensive if you factor in the cost
of a gym membership,P90x workout . The cost for P90X is
about three months of a paid gym membership but you get to
keep the program foreverP90x . You can try many of the
online sites, but it will be the same as buying from the
company or a Beachbody Coach. Make sure you are getting
original DVD's. People are selling copies all over. The
problem is how long will they last, P90x workout ,and you
truly need the exercise and nutrition guide to even follow
the program. You can go to any site
http://www.p90xmall.com/ or you can go to and click on
products. P90x dvd You can order directly from the
site,P90x dvd.
great post.
SEO
Seo marketing
Search engine marketing
web design
web development
nice share.
hosting
web hosting service
domain hosting
unlimited hosting
cheap web hosting
thanks.
kamagra tablets
kamagra jelly
Buy kamagra
cheap kamagra
kamagra
kamagra 100mg
hsalediscountjewelry
lovediscountjewelry
paulover
15vincecarter15
paul925
paul1837
Provide high quality silver Tiffany jewellery including necklaces,rings and other style jewelry at wholesale prices.Pick your dreaming
Tiffany jewellery
Tiffany co
Tiffany
Tiffany Stores is the best online United Kingdom jewelry stores where you can buy the cheapest Tiffany & Co silver jewelry.
Our huge selection of Tiffany
Tiffany & Co Rings
Tiffany & Co Earrings
Tiffany & Co Bracelets
Buy cartier ring, cartier love on abcartier.com. We also provide cartier bracelet, cartier jewelry and so on. Now come on and get what you want.
Cartier Jewelry
Cartier jewellery
The article written by your very good, I like it very much. I will keep your new article.
rosetta stone spanish,
rosetta stone,
rosetta stone language.
People usually say :"Seeing is believing." GHD Each attempt has a corresponding gain, in part or obvious, or vague. At least we have the kind of satisfaction After I bought this watch ,in a sense,it means a great deal to me. net a porter thank you!it is very useful tools to protect our time.If you never pay attention to yourself ,please grasp this chance.a few days ago,I bought a Rolex watches.IT's very good to use.So i want to write an article about watches to share with everyone on So as to more and more people to konw it. UGG brand is relatively common, in addition to the Rolex ping g15even see watch on the movement and you don't know.
Rolex watches
DDo you have heard ed hardy ? Let's me introduce it to you,it contain ed hardy t shirts , ed hardy bags and ed hardy handbags and so on.
Also,Are your look at vivienne westwood jewellery,vivienne westwood necklace, its brand is vivienne westwood.It includes vivienne westwood earrings,vivienne westwood necklace,vivienne westwood bags and vivienne westwood wallet, vivienne westwood purse,vivienne westwood handbags and vivienne westwood cufflinks,vivienne westwood brooches and so on. The brand cheap vivienne westwood is more and more popular now. Now days,juicy couture became more and more popular,it includes juicy couture flip flops,juicy couture tracksuits,juicy couture watches,Particularly in summer.
ED clothing
can be bought in many department stores and specialty shops located nationwide. Good thing there is ED Hardy Shoes
. You will simply head on over to our website and check out the selection of ED Hardy Shoes
. hardy shirt
is one of the labels that never become outdated.
Many online pharmacies sell fake or generic lida
. If the doctor approves your form, it means the usage of lida daidaihua
is safe for your use. daidaihua
is based on ancient Chinese formula. The lida slimming
stick to the basic theme. slimming capsule
is purely natural as it is made from plants no acids. The intake of slimming capsules
proves to be a safe obesity treatment option.
lv features Monogram canvas with natural cowhide trim. The classic louis vuitton and quatrefoil signature design always can attract appreciations from someone special hidden in the crowd. The shiny brass hardware and the modern, feminine shape make Louis vuitton bags exude a more luxurious look. Besides the pleasing appearance, louis vuitton handbags is multi-functional.
Finally advice from recent Microsoft CompTIA ExamMCITP test questions experiencers - personal experience is 70-680 the best Microsoft MCITP study guide and there is no Microsoft MCITP simulation like MCITP Microsoft MCITP tips from a friend. 70-680
we like wholesale gucci handbags
Safe, Faste, buy wow gold
I agree with articles point it really very good. 4 week cna classes
Stock lace wigs and full lace wigs. We supply Indian remy hair stock, celebrity, and custom full lace front wigs & cheap lace front wigs worldwide.Besides that,cheap hair extensions service is also included.
Wearing front lace wigs is becoming more and more popular among women. Suddenly it seems there are more and more celebrity stars wearing lace front wigs. lace front wigs for black women are plentiful, allowing you to choose a color and style lace wig with hair extensions that fits your needs perfectly.
cheap ladies handbags purses online
cheap bags
cheap wedding dresses discount
tea length wedding dresses simple
cheap plus size wedding dresses
ed hardy hoodies
cheap christian audigier bikini
ed hardy shirts
cheap christian audigier hoody
women ed hardy clothing
ed hardy hoody uk
ed hardy jacket
ed hardy uk
ed hardy shirts
ed hardy swimwear
ed hardy ugg boots
ed hardy shoes uk
ed hardy hoody uk
buy ed hardy shirts
ed hardy womens shoes
ed hardy handbags uk
ed hardy at uk
ed hardy t shirts uk
ed hardy sunglasses uk
ed hardy womens tiger hoodie