ptunnel-ng
TCP tunnel encapsulated inside ICMP (ping) packets.
It encapsulates TCP traffic inside ICMP echo packets (the ones `ping` uses). It covers the case where a firewall lets ping out but blocks everything else: you run a client on the attacker and a server on the compromised host, and the tunnel travels hidden in the ICMP data field, where nobody looks. It is slow and fragile, but when ICMP is the only thing that passes, it is the difference between pivoting or not. CPTS module 10 uses it as its *ICMP tunneling* example.
Family Pivoting & tunnelling
Flags -r -R -x -l -p
Concepts ICMP Tunneling, Dynamic Port Forwarding (SOCKS), Port Relay with socat
Cheatsheet socat, ligolo & Meterpreter
Installation
sudo apt install -y ptunnel-ngUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.