TCP over ICMP

Started by SofaKing, June 15, 2016, 05:18:42 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

SofaKing

June 15, 2016, 05:18:42 PM
Better start blocking ICMP ;)

https://github.com/Maksadbek/tcpovericmp
Networking -  You can talk about us but you can't talk without us!

deanwebb

#1
June 15, 2016, 06:25:45 PM
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

Reggle

#2
June 15, 2016, 08:05:44 PM
Not entrely new actually. Useful payload for ICMP echo has been attempted before. I'm sure there are IPS'es paying attention to this. Basic firewalls will allow this to pass however.

deanwebb

#3
June 16, 2016, 06:30:44 AM
Well, I just always try to block the hell out of ICMP, whenever possible.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.

dlots

#4
June 16, 2016, 09:22:34 AM
Reminds me of a story I heard once:
A new admin came in to replace an old engineer who had been fired.  He looked all over the place and couldn't find any of the passwords.  Needing them he finally broke down and called the old engineer asking him where the password list was, to which the engineer said "They are on the network" and hung up.  Fast forward quite some time, and while the admin was looking at a packet capture he saw an odd ICMP packet, upon drilling into it he discovered that the payload was infact all the passwords for the network.

deanwebb

#5
June 16, 2016, 09:25:13 AM
Lol, that's insane... and not recommended, according to my CISSP Official Study Guide.
Take a baseball bat and trash all the routers, shout out "IT'S A NETWORK PROBLEM NOW, SUCKERS!" and then peel out of the parking lot in your Ferrari.
"The world could perish if people only worked on things that were easy to handle." -- Vladimir Savchenko
Вопросы есть? Вопросов нет! | BCEB: Belkin Certified Expert Baffler | "Plan B is Plan A with an element of panic." -- John Clarke
Accounting is architecture, remember that!
Air gaps are high-latency Internet connections.
Print
Go Up Pages1
User actions