---
description: ICMP and DNS tunneling via IPv4 and IPv6
---

# Fraud Bridge

Source: [https://github.com/stealth/fraud-bridge](https://github.com/stealth/fraud-bridge)



## How to extract files

We can use when TCP/UDP are blocked by Firewall

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FIBmGeBrameFMHkHoowvg%2Fimage.png?alt=media&#x26;token=e4be68aa-abdf-468a-85ea-74a007b6703e" alt=""><figcaption><p>Diagram of Usage</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2Fu8jmtkzZVuRbvSPMeCwd%2Fimage.png?alt=media&#x26;token=8d4ee997-1422-411d-b465-e0f4ae04550f" alt=""><figcaption><p>Generate a random hexadecimal key</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FHJPHYSZz7giYus1gA0MA%2Fimage.png?alt=media&#x26;token=58734927-d7ec-4229-8f18-f930d6735a61" alt=""><figcaption><p>Open the Tunneling in the Attacker machine</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FdxmzMarg57gRvmGJqjV2%2Fimage.png?alt=media&#x26;token=a05ea141-3abf-4354-b7b4-1661e7082e93" alt=""><figcaption><p>execute the inside.sh in the Attacker machine</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FQqas8bFpdWhmS0f9lP8r%2Fimage.png?alt=media&#x26;token=9d9c3816-9c9e-476c-b299-5e493350dfd9" alt=""><figcaption><p>In the Target machine</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2Fubg8smyV9ZlwABByhRWA%2Fimage.png?alt=media&#x26;token=bfe3223d-46ca-44d2-aa48-49f94aa4f896" alt=""><figcaption><p>Execute outside.sh in the target machine</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FTKKgPWk83mTimzaL8d4K%2Fimage.png?alt=media&#x26;token=7f6a3a7b-52fa-4c26-acb2-f999125b73f8" alt=""><figcaption><p>Now we can access </p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FaKm6Yuus8nvaMS4zrb0E%2Fimage.png?alt=media&#x26;token=69c4fa07-17a0-44bd-8242-be08beb411d4" alt=""><figcaption><p>normal ssh access</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FmXiU3GxiAzJUcnz1STee%2Fimage.png?alt=media&#x26;token=a1cd8f08-c1fe-4ddc-939e-382040506372" alt=""><figcaption><p>Wireshark results</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2F60SKKHCeuOPgiLYbP252%2Fimage.png?alt=media&#x26;token=fd2168cb-1d5a-4ff0-ad66-7c15d525fcb9" alt=""><figcaption><p>We can also use DNS instead of ICMP</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FMMp2k1gINwulN9Md0RQ1%2Fimage.png?alt=media&#x26;token=c0147ae6-b3b3-4d99-b967-c237a8e504e0" alt=""><figcaption><p>second part of the tunneling via DNS</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2FhD2X5Bvh38ap0rOL7D1s%2Fimage.png?alt=media&#x26;token=a225c8e4-7baf-40ae-9ef0-5912c00d2472" alt=""><figcaption><p>ssh connection</p></figcaption></figure>

<figure><img src="https://3593245608-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FkPEBr0Ohu5Y49JHmv4La%2Fuploads%2Fiiqo8gGmUpSpUo6dblPg%2Fimage.png?alt=media&#x26;token=264dc258-904d-4da5-b1c1-ddcd51b9ed8e" alt=""><figcaption><p>Wireshark results</p></figcaption></figure>
