pingtunnel

Pingtunnel Pingtunnel 是一款通过 ICMP 发送 TCP/UDP 流量的工具。 注意：本工具仅供学习研究使用，请勿用于非法用途 使用方法与详细文档 📖 详细文档请参阅USAGE.md：包含完整的命令行参数、配置文件用法（-c config.json），以及各种代理场景的配置指南（全局 SOCKS5 代理、TCP 端口转发、UDP 转发、正向代理、端到端 AES/ChaCha20 加密等）。 快速开始 1. 服务端 准备一台具有公网 IP 的服务器（例如 www.yourserver.com） 从 releases 下载发布包（例如...

PingRAT

PingRAT PingRAT 通过 ICMP 载荷秘密地通过防火墙传递 C2 流量。 功能： 使用 ICMP 进行命令与控制 可被大多数 AV/EDR 解决方案绕过 使用 Go 语言编写 安装： 下载 预编译的二进制文件 或自行编译二进制文件，即可使用： $ git clone https://github.com/umutcamliyurt/PingRAT.git $ go build client.go $ go build server.go 使用方法： 服务端： ./server -h Usage of ./server: -d string 目标 IP 地址 -i strin...

pingback

Detección de C2 Pingback Un paquete de Zeek y reglas de Suricata para la detección de túneles de ping ICMP creados por la herramienta C2 Pingback. Entrada de blog complementaria: https://corelight.blog/2021/05/07/pingback-icmp-tunneling-malware/ Instalación La forma más sencilla de instalar este...

ICMPTunnel

icmptunnel es una herramienta para tunelizar tráfico IP dentro de paquetes ICMP de solicitud y respuesta de eco ping. Está pensada para evadir firewalls de forma semicubierta, por ejemplo al pivotar dentro de una red donde ping está permitido. También puede ser útil para la salida desde una red...

pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems. Called 'Pingback,' the Windows malware leverages Internet Control Message Protocol ICMP tunneli...

A Red Teamer’s guide to pivoting

A Red Teamer’s guide to pivoting A Red Teamer's guide to pivoting Penetration testers often traverse logical network boundaries in order to gain access to client’s critical infrastracture. Common scenarios include developing the attack into the internal network after successful perimeter breach o...