gaining acces to website with ip restrictions?

[jake2891]

how does one bypass such restrictions?

Code: Select all

<?php
$ip = $_SERVER['REMOTE_ADDR'];
if (preg_match('/^10\.10\./',$ip)){
    // can log in
    return true;
}

return false;

?>


[Goatboy]

10.10.0.0 is in the private address range, meaning you would need to have access to a computer on the local network.

[jake2891]

Thanks for the reply. are there any work arounds for this problem without actually getting access to a computer on the network? for example like if apacehe is configured incorrectly you can make the connection appear to becoming from inside the network?

[Goatboy]

You'd have to find an exploit for the specific version of Apache they are running, and unfortunately I don't know of any off the top of my head that would allow you to spoof an internal IP. That'd pretty badass. Not sure how the routing would work though.

[Bren2010]

Assuming that there's no vulnerabilities in Apache like Goatboy said, you can't. That is, not without a DMZ server granting you access into the LAN.

For example, if I left something I need on my desktop at home, and I have a DMZ server running (*cough* http://plz.rewt.me/ *cough*) running, I can SSH into that, and SSH into my desktop computer and get what I need. However, without that, I'd be shit out of luck. See where I'm going with this?

I also suppose something along the lines of a Squid proxy, or even an unprotected browser proxy like Glype would work.