The author describes the tool can be used “in those times when everything else is blocked.”.It is used to tunnel TCP connections over ICMP Echo requests and replies.The idea behind Ping tunneling is to use the payload portion of the ICMP protocol to encapsulate transport layer protocols (TCP). By default, the 32-bytes contains characters from a-z and will be repeated based on the size of the packet. The same is depicted in the below diagram. The default nature of the ping application is to send 32 bytes to the other system. In the below example: Host IP address 192.168.1.5 send a ping request to remote host IP address 192.168.1.4. A ping tool is used to test network connectivity by sending requests & listening to replies back. ICMP Protocol dissected: Ping application uses ICMP protocol to communicate over a network. The following are covered as part of this Covert channels lab exercise:
0 kommentar(er)
