i promise to put the real README here shortly. In the meantime, heres the comments from reDuhClient.java /** * The name? redirector.jsp ==> redir.jsp ==> reDuh.jsp * * *reDuh allows us to tunnel TCP traffic to any machine:port pair through a webserver which is only open on port 80. * *If you don't know why this is useful, you probably don't need it. * * Like this: * * [Internal Machine] ___[Webserver]___ [Attacker Machine] * /----<---<---| reDuh.jsp |<----[reDuhClient] <---[Client Application] * | n | pipedInput | 80 | | n | * [listening service]--->| pipedOutput |---->--->---/ \------^ * \_________________/ * * Glenn Wilkinson :: SensePost * glenn@sensepost.com **/