[2006/07/18] New papers mirrored: "Caracterisation des canaux caches en logique temporelle alternante" [fr] (2005) "Scenarios and Covert channels: another game..." (2004) "IP covert timing channels: design and detection" (2004) (reference => mirror) "Web Tap : Detecting Covert Web Traffic" (2004) (reference => mirror) "New covert channels in HTTP: adding unwitting Web browsers to anonymity sets" (2003) (reference => mirror) [2006/05/07] New WebShell version - 2.2.2 [2006/04/27] New paper mirrored: "Detecting NUSHU Covert Channels Using Neural Networks" (2005) [2006/04/19] New paper mirrored: "Detection of Covert Channel Encoding in Network Packet Delays" (2005) [2006/04/07] New AF version - 0.8.1 [2006/04/04] irc.gray-world.net:6677 is back [2006/03/27] New gray-world.net mirror: http://jeremian.info/gray-world.net/ [2006/02/19] New papers mirrored: "Establishing Big Brother using covert channels and other covert techniques" (1997) "Covert Channels for Collusion in Online Computer Games" (2004) [2006/02/17] New paper mirrored: "Research Report: Covert Channels 2005/2006" (2006) [2006/02/06] New AF version - 0.8 [2005/12/27] New paper mirrored: "Detecting HTTP Tunneling Activities" (2002) [2005/12/01] New GW paper: "Covert channels through the looking glass"; New PoC added : HttPostNG [2005/11/17] New AF version - 0.7.5 [2005/11/07] New AF version - 0.7.4 [2005/10/24] New link added : http://www.cr0.net:8040/code/network/mirkov4-1.1.zip [2005/09/16] New papers mirrored: "A Pump for Rapid, Reliable, Secure Communication" (1993) "A Network Pump" (1996) [2005/09/02] New papers mirrored: "Covert Channels in TCP/IP Headers" (2002) "Eliminating Steganography in Internet Traffic with Active Wardens" (2002) "Embedding Covert Channels into TCP/IP" (2005) "Covert channels and anonymizing networks" (2003) "New covert channels in HTTP: adding unwitting Web browsers to anonymity sets" (2003) "Practical Data Hiding in TCP/IP" (2002) [2005/08/26] New (old) papers mirrored: "A Note on the Confinement Problem" (1973) "Departement of Defense Trusted Computer system evaluation criteria - 5200.28-STD" (1985) "Extension to 5200.28-STD to trusted network systems and components" (1987) [2005/08/08] New AF version - 0.7.2 [2005/07/12] New AF version - 0.7.1 Board update [2005/06/10] New AF version - 0.7 [2005/04/13] New GW Team member : Andreas New paper added: "Web Tap : Detecting Covert Web Traffic" (google it) [2005/04/12] New papers added: "IP covert timing channels: design and detection" (google it) "Covert channels detection in protocols using scenarios" [2005/04/01] Board is back [2005/03/24] New paper added: "L O K I 2 (the implementation) for Phrack 51" [2005/03/15] New AF version - 0.6 [2005/02/21] New papers added: "~Whispers On The Wire~ Network Based Covert Channels Exploitation & Detection" "Malacious ICMP Tunneling : Defense Against the Vulnerability" "The Implementation of Passive Covert Channels in the Linux Kernel" New links added: http://ksb.sourceforge.net/ (Kernel Socks Bouncer) http://l7-filter.sourceforge.net/ [2004/11/19] New AF version - 0.5.5-p1; [2004/10/18] New AF version - 0.5.5; New public IRC server: IRC://irc.gray-world.net:6677/gray-world.net New links added: http://tigerteam.se/dl/sbd/ (Shadowinteger's Backdoor) http://tigerteam.se/dl/rrs/ (Reverse Remote Shell) http://www.sharp-ideas.net/archives/000048.html (Monkey Shell) [2004/08/25] Board moved to the new 195.137.249.92 GW server. [2004/07/15] New WebShell version - 2.2.1; New link added: http://urcs.unmanarc.com/ [2004/06/11] New GW Team member : Ilya Zelenchuk; New PoC added : Skeeve; [2004/06/02] New AF version - 0.5.4; [2004/04/24] Public irc channel created: IRC://irc.0x557.org:3331/gray-world.net [2004/04/18] New CCTDE version - 0.2; New link added: http://sourceforge.net/projects/ntlmaps/ [2004/04/14] New links added: http://www.klake.org/~jt/dnshell/ http://ftester.sourceforge.net/ [2004/04/07] New paper added: "Rootshell with icmp_rcv() Hooking" [2004/03/31] New GW paper: "Reverse Tunneling Techniques: theoretical requirements for the GW implementation"; [2004/03/30] New GW Team member : Zhao Wei; [2004/02/09] New links added: http://search.cpan.org/src/BOOK/connect-tunnel-0.03/ http://dhirajbhuyan.hypermart.net/ftp-tunnel.html http://freshmeat.net/projects/reverb/ http://desproxy.sourceforge.net/ http://www.pyrexic.com/hirosh/eos-india/misc/recub.htm [2004/02/06] New GW Team member : Arun Darlie Koshy; New GW Team member : Mehmet; New project added: CCTDE [2004/01/30] Web site Legal Notice added; [2004/01/12] New AF version - 0.5.3; The papers page now has a RFC section; [2004/01/09] New GW paper: "A Forensic Analysis: HTTP Protocol"; [2003/12/23] New Msnshell version - 1.1; [2003/12/21] The Polish version of the site; [2003/12/17] New project added: Active Port Forwarder [2003/12/15] New GW Team member: Jeremian New papers added: "Covert Channel Analysis", "Information Hiding - a Survey", "Quantifying Information Flow", "Covert Channels Here to Stay?", "Simple Timing Channels", "Discussion of a Statistical Channel"; New links added: http://www.geocities.com/fryxar/ http://www.outguess.org/ [2003/12/04] GW mirrors list added. [2003/12/01] New GW Team member: Javier Martinez Marti The Spanish version of the site; [2003/11/28] New links added: http://fare.tunes.org/files/fwprc/ http://cqs.dyndns.org:81/socks/ New paper added: "Covert Channel Analysis and Data Hiding in TCP/IP" [2003/11/25] The paper "Covert Channel and Tunneling over the HTTP protocol Detection: GW implementation theoretical design" updated. [2003/11/14] The PhpBB board updated to 2.0.6; [2003/10/16] Chinese and Russian versions of the site; [2003/10/08] New Gray-World site design; New WebShell version (2.1.0) added; New Firepass version (1.1.2a) added; New current working version of the cctde paper on http://team.gray-world.net/public/ New links added: http://www.tvsg.org/ups/ (Thanks to AutoNiN), http://www.phenoelit.de/stuff/cd00rdescr.html and http://cmn.listprojects.darklab.org/ (Thanks to Richard). New papers added: "Infranet: Circumventing Web Censorship and Surveillance", "The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments" [2003/09/03] New project added: MsnShell New CCTT minor revision version added. [2003/09/02] New GW Team member: Wei Zheng New link added: http://revinetd.sourceforge.net/ [2003/08/17] New links added: http://httppc.sourceforge.net/ http://cmn.listprojects.darklab.org/ http://transconnect.sourceforge.net/ http://sourceforge.net/projects/transproxy/ [2003/07/25] New link added: http://www15.brinkster.com/nick102799/insider/ [2003/07/22] New tool added: /tools/hping2.0.0-rc2.tar.gz [2003/07/21] New GW paper: "Covert Channel and Tunneling over the HTTP protocol Detection: GW implementation theoretical design"; New GW website design; [2003/07/17] CHANGELOG file created