Lucene search

K
kitploitKitPloitKITPLOIT:3274903743725431523
HistoryMay 12, 2024 - 12:30 p.m.

PingRAT - Secretly Passes C2 Traffic Through Firewalls Using ICMP Payloads

2024-05-1212:30:00
www.kitploit.com
34
pingrat
command and control
firewalls
icmp
av/edr
go
installation
server
client
network interface
download.

AI Score

7.4

Confidence

Low

PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.

Features:

  • Uses ICMP for Command and Control
  • Undetectable by most AV/EDR solutions
  • Written in Go

Installation:

Download the binaries

or build the binaries and you are ready to go:

$ git clone https://github.com/Nemesis0U/PingRAT.git  
$ go build client.go  
$ go build server.go  

Usage:

Server:

./server -h  
Usage of ./server:  
  -d string  
        Destination IP address  
  -i string  
        Listener (virtual) Network Interface (e.g. eth0)  

Client:

./client -h  
Usage of ./client:  
  -d string  
        Destination IP address  
  -i string  
        (Virtual) Network Interface (e.g., eth0)

Download PingRAT

AI Score

7.4

Confidence

Low