Tunna is a set of tools which will wrap and tunnel any TCP
communication over HTTP. It can be used to bypass network restrictions
in fully firewalled environments.
The web application file must be uploaded on the remote server. It will
be used to make a local connection with services running on the remote
web server or any other server in the DMZ.
The local application communicates with the webshell over the HTTP
protocol. It also exposes a local port for the client application to
connect to.
Since all external communication is done over HTTP it is possible to
bypass the filtering rules and connect to any service behind the
firewall using the webserver on the other end.
Tunna framework
Tunna framework comes witht he following functionality:
 | Ruby client - proxy bind: Ruby client proxy to perform the tunnel to the remote web application and tunnel TCP traffic. |
| Python client - proxy bind: Python client proxy to perform the tunnel to the remote web application and tunnel TCP traffic. |
| Metasploit integration module, which allows transparent execution of metasploit payloads on the server |
| ASP.NET remote script |
| Java remote script |
| PHP remote script |