ICMP_ECHO_REPLY tunnel
  Example packets from 007Shell
  cd /tmp; ls -la
  0000  00 00 00 00 00 00 00 00  00 00 00 00 08 00 45 00   ........ ......E.
  0010  00 6b 00 00 40 00 40 01  3c 90 7f 00 00 01 7f 00   .k..@.@. <.......
  0020  00 01 00 00 df ce 00 00  01 f0 64 72 77 78 72 2d........ ..drwxr-
  0030  78 72 2d 78 20 20 20 32  31 20 72 6f 6f 74 20 20   xr-x   2 1 root  
  0040  20 20 20 72 6f 6f 74 20  20 20 20 20 20 20 20 20      root          
  0050  20 35 30 34 20 41 75 67  20 31 31 20 31 33 3a 30    504 Aug  11 13:0
  0060  39 20 2e 2e 0a 00 00 00  00 00 00 00 00 00 00 00   9 ...... ........
  0070  00 00 00 00 00 00 00 00  00                        ........ .       
  0000  00 00 00 00 00 00 00 00  00 00 00 00 08 00 45 00   ........ ......E.
  0010  00 71 00 00 40 00 40 01  3c 8a 7f 00 00 01 7f 00   .q..@.@. <.......
  0020  00 01 00 00 b9 42 00 00  01 f0 2d 72 2d 2d 72 2d   .....B.. ..-r--r-
  0030  2d 72 2d 2d 20 20 20 20  31 20 72 6f 6f 74 20 20   -r--     1 root  
  0040  20 20 20 72 6f 6f 74 20  20 20 20 20 20 20 20 20      root          
  0050  20 20 31 31 20 53 65 70  20 31 35 20 31 31 3a 32     11 Sep  15 11:2
  0060  37 20 2e 58 30 2d 6c 6f  63 6b 0a 00 00 00 00 00   7 .X0-lo ck......
  0070  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00      ........ ....... 

Copyright 2003, Bri Hatch of Onsight, Inc.

Presented at SecureWorld Expo, 2003.

Presentation created using vim and MagicPoint.