Collaborate Disseminate
I’m having some issues getting Honeyd to work properly on an external network interface on Ubuntu 20 LTS running on a Proxmox server. I’m fairly sure it’s a configuration/setup problem on the VM I’m running it on, as the config file works … Continue reading Honeyd not responding to TCP
Rootless podman, by proxy of the Linux Kernel, has restrictions against ping,
It is most likely necessary to enable unprivileged pings on the host.
Why do unprivileged pings need to be enabled? And what is the detriment to be able to sen… Continue reading Why is ping special: why do "unprivileged pings" have to be enabled?
Computer memory is a problem that has been solved for many years. But early on, it was more than just a small problem. We’ve many of the different kinds at …read more Continue reading Hard(er) Drives: Impractical, Slow, Amazing, and Incredible
What is the token generated when you create a snort rule that will detect all icmp traffic?
I’m learning about data exfiltration using ICMP and delivery of a payload is generally done using the -p "pad bytes" in ping -c 1 -p $encoded_payload. Are there often legitimate use for "pad bytes"? Can it simply be str… Continue reading Can the ICMP "pad" safely be stripped in most situations for defense?
We’ve all been online from home a bit more than usual lately, in ways that often stretch the limits of what our ISP can muster. You know the signs — …read more Continue reading That Clock on the Wall is Actually a Network Ping Display
The earliest stored program computer in the modern sense was not one of the names such as ENIAC or Colossus that you might expect, but the Manchester Baby, an experimental …read more Continue reading An Entire Computer In ICMP Packets
I need to send ICMPv6 echo request with payload of size greater than 65535 bytes. To test ping of death attack.
I tried below scapy codes but got errors
pkt=IPv6(src=src1, dst=dst1)/IPv6ExtHdrHopByHop(options=Jumbo(jumboplen=66000))/ICMPv6… Continue reading How to create icmpv6 ping of death packet using scapy?
The rejected ICMP requests have been logged on the firewall of my router.
IN=ppp*** Direction=OUT Public->Local PROTO=ICMP Type=8 CODE=0 DST is
my WAN IP, and I’m in a CGNAT.
It sends one request every minute, and I get "general … Continue reading ICMP Echo Requests Every Minute from an IP Address
I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found two ICMP related examples – Nanolocker … Continue reading Real-world application of network steganography