2203 matches found
PiX-C2
PiX-C2 ICMP C2 server application written by NoCow email: [email protected] The ICMP C2 project ie PiX-C2 is a client/server application that allows for command and control using only ICMP. The server will sniff ICMP packets and pull information from the data payload of the ICMP packet. If t...
project-memoria-detector
project-memoria-detector The project-memoria-detector tool aims to determine whether a target network device runs a specific embedded TCP/IP stack. Currently, the tool supports fingerprints for 16 embedded TCP/IP stacks and their variations: uIP, Contiki or Contiki-NG picoTCP or picoTCP-NG Nut/Ne...
mtr
WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...
pyc2
pyc2 simple c2 written in python2 to demonstrate security concepts. use icmp echo requests and replies to trade base64 encoded commands and replies. Video explaining some of the security concepts and implementation decisions: https://www.youtube.com/watch?v=DHrEn7oK9vQ requires scapy pip install...
astsu
astsu How it works Scan common ports Send a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports found. Discover hosts in network Uses as a base the router's ip to map all possible ips. It th...
zmap
ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...
QueenSono
QueenSono ICMP Data Exfiltration A Golang Package for Data Exfiltration with ICMP protocol IPv4 & IPv6. QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common. It could also been used within a system with basic ICMP inspection ie. frequency and content lengt...
CVE-2017-2671
Linux kernel CVE-2017-2671 Local Denial of Service Vulnerability what !! CVE-2017-2671 1 Linux kernel CVE-2017-2671 Local Denial of Service consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the...
pingtunnel
Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation...
fraud-bridge
Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...
D3m0n1z3dShell
γπγAbout D3m0n1z3dShell Demonized Shell is an Advanced Tool for persistence in linux. Install root@kitploit: git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git cd D3m0n1z3dShell chmod +x demonizedshell.sh sudo ./demonizedshell.sh One-Liner Install Download D3m0n1z3dShell with all...
pingback
Pingback C2 Detection A Zeek package and Suricata rules for detection of ICMP ping tunnels created by the Pingback C2 tool. Accompanying blog post: https://corelight.blog/2021/05/07/pingback-icmp-tunneling-malware/ Installation The easiest way to install this package is through zkg: zkg install...
AppleDOS
AppleDOS CVE-2018-4407 Based on CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, this tweet, and this video. The bug is heap overflow vulnerability in bad packet handling when OS try to send ICMP message containing segments from bad packet back to the sender. This POC will...
xmap
XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...
PingRAT
PingRAT PingRAT pasa secretamente trΓ‘fico C2 a travΓ©s de firewalls utilizando cargas ΓΊtiles ICMP. CaracterΓsticas: Usa ICMP para Comando y Control Indetectable por la mayorΓa de las soluciones AV/EDR Escrito en Go InstalaciΓ³n: Descargar los binarios o compila los binarios y estarΓ‘s listo:...
meteor
Meteor A cross-platform C2/teamserver supporting multiple transport protocols, written in Go. Note: This is in development and as such is not exactly stable. Documentation is also lacking, but will be improved gradually over time. General The Meteor system is split into several parts: Core : the...
ICMP-TransferTools
ICMP-TransferTools ICMP-TransferTools is a set of scripts designed to move files to and from Windows hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell client for each transfer direction Download & Upload...
bonesi
BoNeSi BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. What traffic can be generated? BoNeSi generates ICMP, UDP and TCP HTTP flooding attacks from a defined botnet size different IP...
hyenae-ng
Hyenae NG Hyenae NG Next Generation es una reescritura de la herramienta original Hyenae que fue publicada originalmente en el aΓ±o 2010. AdemΓ‘s de cambiar de C a C++, utilizando conceptos de diseΓ±o modernos, Hyenae NG fue al igual que el Hyenae original escrito pensando en la mΓ‘xima portabilidad...
ICMP-Ghost-A-Fileless-x64-Assembly-C2-Agent
root@kitploit: |\ |\ |\ |\ |\ |\ \ |\ |\ \ \ \ | \ \ \\ \ \ |\ \ \ || \ | \ \ |||\ \ \ \ \ \ \ \ \ \\ \ \ \ \ \ \ \ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ ||\ \ \ \ \ \ \ |\ \ \ \ \ \ \ \\ \ \ \ \ \\ ||||||||\ || ||| || Fileless, pure x64 Assembly C2 implant utilizing a...