httptunnel
  URLs look like this:
  POST /index.html?crap=102944784
  POST /index.html?crap=102944785
  POST /index.html?crap=102944786
  Data is sent as HTTP POST data.
  Data is received as HTTP document response.
  Server cannot connect to client
  Client connects periodically with NOP.
  Can create full VPN using ppp on both ends.
  Can use SSH RemoteForwards to tunnel back in.

Copyright 2003, Bri Hatch of Onsight, Inc.

Presented at SecureWorld Expo, 2003.

Presentation created using vim and MagicPoint.