Slashdot Mirror
Covert Channel: ASCII Art Over ICMP
An anonymous reader writes "Have you ever had a particularly lossy Cisco ping, which you were sure was trying to tell you something? I mean, really *tell* you something. Echoart allows you to return a simple ascii art image in response to a Cisco-style ping."
...mostly useless, yet very cool -- much like /. itself.
dmiessler.com -- grep understanding knowledge
Now we've got to set our firewall to block pings, too, to stop that damn goatse guy . . . . what will the trolls think of next?
When 'hostname poop' isn't enough...
This means that, with the lamefilter installed, ICMP is now more advanced than Slashdot.
and this is the best we get?? All right I admit to being a little let down.
I don't want knowledge. I want certainty. - Law, David Bowie
The Army reading list
nothing special =(
How long do you suppose it'll be before someone starts using this to send an ASCII-art goatse.cx guy in response to pings? It'd give script kiddies looking for backdoors something to think about, at least.
20 January 2017: the End of an Error.
It works on OS X. I'm so tempted to open up my wireless so people can get a big finger when they ping my machines while wardriving.
I'm in the hole of the broadband donut.
Behold the return of ASCII porn!
PingMUD. Anyone wanna help?
A good argument I can use so that damn security dude opens up ICMP on our firewalls.
The glass is half-full. With poison. And there are cracks in the glass. The dirty, dirty glass.
I used to browse Slashdot on minimum threshold, until I saw a goatse ASCII image... I'm afraid that such an image might make +5 for this story.
with a simple ascii response of a web page to my simple http style request.
Generally seems like somebody is deperately trying to hang on to the BBS days.
Well the site is loading as fast as the BBS days so that's somewhat nostalgic right there...
I did up a silly perl script, using curses, that ran an ascii art animation of stick figure A throwing a grenade at stick figure B.
;)
I, the guy that owned the machine, was figure A. The guy trying to telnet to my machine was figure B. After figure B was reduced to a crater I printed some message along the lines of "you aren't welcome here, go away".
Ran it out of hosts.deny and left it up for quite a while. I was bored, sounded more fun than setting up a firewall like I should have.
It worked surprisingly well, even with the windows telnet client.
This is all I see:
44 0 0 33333
44 00 0 33 33
44 4 0 00 3
44 4 00 00 3 33
444 44 0 0 3
44 0 0 3 33
4 00 00 3333
I guess it works!
I really hate signatures, but go to my website.
to get spammed! I can see it now, pings which draw out "11VIAGRA CH3AP~!", or "`L00kING 4 L0\/3???"
Goatse is celebrating his ass off......oh wait
Table-ized A.I.
Slashdot, why have you so poisoned my mind??
There's a Mercedes gap too. I want one and can't afford one, but it's not government's job to do anything about it.
Screw ICMP, I want to see ASCII Art Over ICBM!
Switch back to Slashdot's D1 system.
http://www.unixauthority.com/~fiskeja/mirror/mirro r1.internap.com/echoart/
google query
Have a look.
Should be able to do something creative with 550 errors in sendmail, here. Can reject messages contain newlines?
This looks neat - but it would help if there was a way to build the ASCII art from text within the program. In the meantime Email Effects will do the trick very nicely.
This program doesn't seem to be anything but a slightly sophisticated version of 'banner' that is able to intercept and send packets over a Cisco network. As I said before, nothing new ...
The part that's in bold is the part that's new.
Cretin.
--- These are not words: wierd, genious, rediculous
How long until people claim to see the Virgin Mary or some other figure in pings?
ok, so you are going to go through all of that trouble to run code like that as root. great idea!
tcpdump -lni dc0 'icmp[0] == 8' | \
while read x input x ip x; do \
nemesis-icmp -v -i 0 -S ${ip//:/} -D $input -P $input_file; \
done
substitute hping or whatever your tool of choice is.
and if you want it to only reply to specific OS's then obsd's tcpdump can do it with -o and an extra condition in the script.
-nocfed
Reason: Your post looks too much like ascii art.
It's not so much the ping itself, rather how the results are displayed on a Cisco IOS device when you issue a ping command. Bangs and dots.
A Cisco ping command basically spews out some number of ping packets as fast as possible.
:)
The results then get displayed in order, with a dot displayed for every packet that times out and a ! displayed for every packet that actually gets echoed back.
So the upshot of this is that the echo art program isn't actually sending artwork, it's responding to packets or not responding to packets based on the artwork file you give it, which will cause it to draw the art on the other side, the guy doing the pinging.
Neat trick, actually.
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
It's actually slightly more complex than that..
Cisco style ping: "A '.' is printed for every packet sent and a backspaced '!' for every valid response."
So it prints a . then backspaces over it and prints a ! if it gets a response.
- Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
Did the 'Art' that was put on the page look like crop circles to anyone else?
.sig?
<Tinfoil hat>The aliens have a new way of passing information to the chosen. I saw Mulder ping this site and got a map to the next landing coordiates. If you believe, you can see it.</Tinfoil hat>
Psst. Hey buddy, can I borrow a