sqlmap/extra/icmpsh
2010-10-27 23:01:17 +00:00
..
__init__.py Written from scratch in Python the icmpsh master 2010-10-27 20:54:46 +00:00
icmpsh_m.py Minor bug fixes and enhancements to ICMPsh tunnel 2010-10-27 23:01:17 +00:00
icmpsh-m.c Added icmpsh from Nico Leidecker for future enhancement to --os-cmd and --os-pwn to make the user able to choose between TCP (Metasploit payloads) and ICMP (icmpsh software). 2010-10-27 14:36:45 +00:00
icmpsh-m.pl Added icmpsh from Nico Leidecker for future enhancement to --os-cmd and --os-pwn to make the user able to choose between TCP (Metasploit payloads) and ICMP (icmpsh software). 2010-10-27 14:36:45 +00:00
icmpsh-s.c Added icmpsh from Nico Leidecker for future enhancement to --os-cmd and --os-pwn to make the user able to choose between TCP (Metasploit payloads) and ICMP (icmpsh software). 2010-10-27 14:36:45 +00:00
icmpsh.exe Added icmpsh from Nico Leidecker for future enhancement to --os-cmd and --os-pwn to make the user able to choose between TCP (Metasploit payloads) and ICMP (icmpsh software). 2010-10-27 14:36:45 +00:00
README.txt Added icmpsh from Nico Leidecker for future enhancement to --os-cmd and --os-pwn to make the user able to choose between TCP (Metasploit payloads) and ICMP (icmpsh software). 2010-10-27 14:36:45 +00:00

icmpsh - simple reverse ICMP shell

icmpsh is a simple reverse ICMP shell with a win32 slave and a POSIX compatible master in C or Perl.


--- Running the Master ---

The master is straight forward to use. There are no extra libraries required for the C version. 
The Perl master however has the following dependencies:

	* IO::Socket
	* NetPacket::IP
	* NetPacket::ICMP


When running the master, don't forget to disable ICMP replies by the OS. For example:

	sysctl -w net.ipv4.icmp_echo_ignore_all=1

If you miss doing that, you will receive information from the slave, but the slave is unlikely to receive
commands send from the master.


--- Running the Slave ---

The slave comes with a few command line options as outlined below:


-t host            host ip address to send ping requests to. This option is mandatory!

-r                 send a single test icmp request containing the string "Test1234" and then quit. 
		   This is for testing the connection.

-d milliseconds    delay between requests in milliseconds 

-o milliseconds    timeout of responses in milliseconds. If a response has not received in time, 
		   the slave will increase a counter of blanks. If that counter reaches a limit, the slave will quit.
                   The counter is set back to 0 if a response was received.

-b num             limit of blanks (unanswered icmp requests before quitting

-s bytes           maximal data buffer size in bytes


In order to improve the speed, lower the delay (-d) between requests or increase the size (-s) of the data buffer.