search

alphasoc / flightsim

A utility to safely generate malicious network traffic patterns and evaluate controls.
https://alphasoc.com
Other
1.25k stars 132 forks source link

Add ICMP tunnelling module #15

Closed chrisforce1 closed 4 years ago

chrisforce1 commented 5 years ago

Currently this module just performs DNS tunneling emulation, but we should extend it to synthesize similar tunnels over ICMP, as per https://www.hackingarticles.in/command-and-control-tunnelling-via-icmp/. We could either split the module out into dns-tunnel and icmp-tunnel or add an argument to describe DNS or ICMP. When running flightsim run and executing all the modules, we'd obviously want to generate both traffic patterns.

chrisforce1 commented 4 years ago

Closing as it's in the product now ✨