QueenSono
QueenSono copied to clipboard
ariary
Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)
From now using net package does not allow to modify echo reply (echo reply msg = original msg) if we were able to do so, we could change the exchange...
It seems that the getPacket does not take into account ICMP packet header: cf https://github.com/ariary/QueenSono/blob/59dd5da577325ac5f45f0012112886b893c4d88c/pkg/icmp/receive.go#L138 Try replace it by 65535, to get the whole size of th ip packet (https://stackoverflow.com/questions/9449837/maximum-legal-size-of-icmp-echo-packet)
