About ICMP-TransferTools

ICMP-TransferTools is a powerful file transfer tool that can help researchers transfer files between Windows hosts through ICMP in restricted network environments.

ICMP-TransferTools consists of four different script files, including a Python server and PowerShell clients for different transmission directions (download and upload).

Tool dependencies

This tool is developed based on Python and PowerShell, and in addition to PowerShell, we also need to install and configure the Python environment on the local device.

The only dependency component required by this tool is Impacket, which we can install using the pip command:

pip3 install impacket

Tool download

Researchers can use the following commands to clone the source code of this project locally:

git clone https://github.com/icyguider/ICMP-TransferTools.git

Tool usage

File download via ICMP

When using this feature, you need to use the two scripts ICMP-SendFile.py and Invoke-IcmpDownload.ps1, and download the file to a Windows host through ICMP.

The Python server must be run in advance to enable file download, please refer to the following help information for the script usage:

usage: ICMP-SendFile.py [-h] [-v] [-b 1000] source destination file

 

ICYGUIDER'S ICMP FILE DOWNLOAD SERVER

 

Positional arguments:

source    The public IP address of the current host

destination    The public IP address of the destination host

file    The file transmitted via ICMP

 

Optional arguments:

-h, --help    Display help information and exit

-v, --verbose    Enable Verbose output mode

-b 1000, --block-size 1000

Size of each data block (default: 1000)

Next, we can use the PowerShell client to download files in the following way:

Invoke-IcmpDownload PublicIPAddressOfServer FileToDownload

Function Demonstration

File Upload via ICMP

When using this feature, you need to use the two scripts ICMP-ReceiveFile.py and Invoke-IcmpUpload.ps1 and upload/download files to a Windows host via ICMP.

The Python server must be run in advance to enable file upload, please refer to the following help information for the script usage:

usage: ICMP-ReceiveFile.py [-h] src file

 

ICYGUIDER'S ICMP FILE UPLOAD SERVER

 

Positional arguments:

src    The public IP address of the client

file    The target file to write data to

 

Optional arguments:

-h, --help    Display help information and exit

Next, we can use the PowerShell client to download files in the following way:

Invoke-IcmpUpload PublicIPAddressOfServer FileToUpload

Function Demonstration