.. /Ptunnel-ng
Star

Access

Ptunnel-ng is a maintained fork of the original ptunnel. It tunnels TCP connections (most commonly SSH) through ICMP echo request/reply packets via a proxy host, allowing traffic to pass through firewalls that permit outbound ping but block other protocols.

Paths:

Resources:

Detections:

Access

  1. Runs the proxy on an operator-controlled host, forwarding incoming ICMP-tunneled connections to the given destination and port (for example an SSH server on the compromised network).

    sudo ptunnel-ng -r<DESTINATION_IP> -R<DESTINATION_PORT>
    Use case
    Proxy side of an ICMP tunnel used as a reverse pivot into an internal service.
    Privileges required
    Administrator/root
    Operating systems
    Linux, MacOS, Windows

  2. Client side. Opens a local TCP listener that is tunneled over ICMP to the proxy, which forwards it to the destination host and port.

    sudo ptunnel-ng -p<PROXY_IP> -l<LOCAL_PORT> -r<DESTINATION_IP> -R<DESTINATION_PORT>
    Use case
    Tunneling SSH or another TCP service through a firewall that only permits ICMP.
    Privileges required
    Administrator/root
    Operating systems
    Linux, MacOS, Windows