PingRAT

PingRAT PingRAT secretly passes C2 traffic through firewalls using ICMP payloads. Features: Uses ICMP for Command and Control Undetectable by most AV/EDR solutions Written in Go Installation: Download the binaries or build the binaries and you are ready to go: $ git clone...

pingtunnel

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

pingback

Обнаружение Pingback C2 Пакет Zeek и правила Suricata для обнаружения ICMP ping-туннелей, создаваемых инструментом Pingback C2. Сопутствующий пост в блоге: https://corelight.blog/2021/05/07/pingback-icmp-tunneling-malware/ Установка Самый простой способ установить этот пакет — через zkg: zkg...

ICMPTunnel

icmptunnel — это инструмент для туннелирования IP-трафика внутри ICMP-пакетов эхо-запроса и эхо-ответа ping. Он предназначен для обхода межсетевых экранов полускрытым способом, например, при перемещении внутри сети, где ping разрешён. Он также может быть полезен для выхода из корпоративной сети в...

pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems. Called 'Pingback,' the Windows malware leverages Internet Control Message Protocol ICMP tunneli...

A Red Teamer’s guide to pivoting

A Red Teamer’s guide to pivoting A Red Teamer's guide to pivoting Penetration testers often traverse logical network boundaries in order to gain access to client’s critical infrastracture. Common scenarios include developing the attack into the internal network after successful perimeter breach o...