GRAY-WORLD.NET TEAM
计算机网络安全技术 不同寻常的网络访问控制系统迂回技术

01010011011011110110111101101110 011010000110010101110010 011001010111100101100101 01100110011001010110110001101100 0110111101101110 01100001 011011000110100101110100011101000110110001100101 0110011101101100011000010111001101110011 011000100110111101111000 01110100011010000110000101110100 011101110110000101110011 0110110001111001

Lewis Carroll "Alice In Wonderland"
Alice
English French Russian Spanish Polish Italian
网站首页 | 开发项目 | 技术论文 | 自由论坛 | 关于我们 | 热门联接 | 赞助支持
 Projects 

With this Proof Of Concept tool, you can simply create an ICMP tunnel between two computers, which may be located in different networks and separated by a firewall. Skeeve utilizes ICMP packets and IP address spoofing technology to create a data channel in order to redirect TCP connections inside this channel.

Skeeve creates an ICMP tunnel which is based on the use of a Bounce server.

This method relies upon the basic IP address spoofing technology. The Client of the tunnel is trying to send a packet to the Bounce server with an address of the destination Server as a source IP. The Bounce Server can replay this packet and forward it to the destination Server. By adding some payload to the packet, we can establish a covert communication channel between two computers without direct network interaction.

Skeeve Client accepts TCP connections and works as a converter of the IP header (by changing protocol flag from TCP to ICMP echo_request|reply and making some other slight modifications). Skeeve Server is doing the reverse procedure and restores original IP header settings. Both parts are implemented in one C program as a Loadable Kernel module.

Ilya
Current Skeeve version: 1.0; README
Download | md5sum: 6fba1f136f30d695114a0b81216f9e90
http://gray-world.net/projects/skeeve/skeeve-1.0.tar.gz

Index of projects



Httpostng - is POC tool converting a text file into one or several png images and sending them to a remote CGI so that a detector has to figure if all POST images are legitimate or suspicious. [learn more]


Team member's sites: blog.0x557.org/icbm/


GNU  GNU General Public License
 GNU Free Documentation License
IRC://irc.0x557.org:3331/gray-world.net
CHANGELOG, MIRRORS, LEGAL NOTICE