{"id":13539470,"url":"https://github.com/PegasusLab/GhostTunnel","last_synced_at":"2025-04-02T06:30:58.447Z","repository":{"id":201824311,"uuid":"143366941","full_name":"PegasusLab/GhostTunnel","owner":"PegasusLab","description":"GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment. ","archived":false,"fork":false,"pushed_at":"2019-03-06T04:26:04.000Z","size":655,"stargazers_count":326,"open_issues_count":2,"forks_count":113,"subscribers_count":27,"default_branch":"master","last_synced_at":"2024-11-03T04:32:38.589Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/PegasusLab.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2018-08-03T02:23:43.000Z","updated_at":"2024-08-27T20:23:21.000Z","dependencies_parsed_at":null,"dependency_job_id":"4169a7ed-a526-426e-b8ae-52a3c4009306","html_url":"https://github.com/PegasusLab/GhostTunnel","commit_stats":null,"previous_names":["pegasuslab/ghosttunnel"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PegasusLab%2FGhostTunnel","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PegasusLab%2FGhostTunnel/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PegasusLab%2FGhostTunnel/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/PegasusLab%2FGhostTunnel/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/PegasusLab","download_url":"https://codeload.github.com/PegasusLab/GhostTunnel/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246767719,"owners_count":20830541,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T09:01:26.372Z","updated_at":"2025-04-02T06:30:57.483Z","avatar_url":"https://github.com/PegasusLab.png","language":"C","funding_links":[],"categories":["\u003ca id=\"1a9934198e37d6d06b881705b863afc8\"\u003e\u003c/a\u003e通信\u0026\u0026代理\u0026\u0026反向代理\u0026\u0026隧道","C","\u003ca id=\"01e6651181d405ecdcd92a452989e7e0\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"56acb7c49c828d4715dce57410d490d1\"\u003e\u003c/a\u003e未分类-Proxy","\u003ca id=\"9d6789f22a280f5bb6491d1353b02384\"\u003e\u003c/a\u003e隧道\u0026\u0026穿透"],"readme":"# GhostTunnel\n\nGhostTunnel is a covert backdoor transmission method that can be used in an isolated environment. It can attack the target through the HID device only to release the payload (agent), then the HID device can be removed after the payload is released.\n\nGhostTunnel use 802.11 Probe Request Frames and Beacon Frames to communicate and doesn't need to establish a wifi connection. Exactly, it communicates by embedding data in beacon and probe requests. We publish the GhostTunnel server and windows agent implemented in c/c++. The agent doesn't need elevated privileges, it uses the system wifi api to send the probe request and receive the beacon. such as on windows, uses the Native WiFi API. So you can implement the corresponding agent on other platforms. The server runs on linux, you need one or two usb wifi card that supports monitor mode and packet injection to run it. \n\n\n# Advantages\n\n- Covertness.\n- No interference with the target’s existing connection status and communications.\n- Can bypass firewalls.\n- Can be used to attack strictly isolated networks.\n- Communication channel does not depend on the target’s existing network connection.\n- Allow up to 256 clients \n- Effective range up to 50 meters\n- Cross-Platform Support.\n- Can be used to attack any device with wireless communication module, we tested this attack on Window 7 up to Windows 10, and OSX.\n\n\n# Usage\n\n### Server\nOnly need one or two wireless network cards that supports packet injection and monitor mode, like TP-LINK TL-WN722N, Alfa AWUS036ACH.\n\nUsage: \n\n```\n\t./ghosttunnel [interface]\n\t./ghosttunnel [interface1] [interface2]\n\n\tCOMMANDS:\n\t\tsessions = list all clients\n\t\tuse = select a client to operate, use [clientID]\n\t\texit = exit current operation\n\t\twget = download a file from a client, wget [filepath]\n\t\tquit = quit ghost tunnel\n\t\thelp = show this usage help\n```\n\n### Client\n\tRelease the payload to the target system (only windows client published) and execute it.\n\n### Demo\nhttps://www.youtube.com/watch?v=2s7qFLCafSI\n\n# Function Implementation\n\n- Shell command\n\tCreate a remote shell. \n\n- Download file\n\tThe file maximum size limit is 10M and can only download one file at a time.\n\n- You can add other functions as needed.\n\n# Building\n\n### Server Requirements\n\tsudo apt-get install pkg-config libnl-3-dev libnl-genl-3-dev libpcap-dev\n\n\n### Compiling\n\n\tserver:\n\t\tcd src\n\t\tmake\n\twindows client:\n\t\tMicrosoft Visual Studio 2015 \n\n\nFor Nethunter(tested on Nexus5):\n- Add ```#include \u003cerrno.h\u003e``` on the top in gt_server.cpp\n- ```apt-get install libpcap0.8-dev```\n- cd src \u0026\u0026 make\n\n# Thanks \n\n- Aircrack-ng\n\t[https://github.com/aircrack-ng/aircrack-ng](https://github.com/aircrack-ng/aircrack-ng)\n- MDK4\n\t[https://github.com/aircrack-ng/mdk4](https://github.com/aircrack-ng/mdk4)\n- hostapd\n\t[http://w1.fi/hostapd](http://w1.fi/hostapd)\n- Kismet\n\t[https://github.com/kismetwireless/kismet](https://github.com/kismetwireless/kismet)\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FPegasusLab%2FGhostTunnel","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FPegasusLab%2FGhostTunnel","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FPegasusLab%2FGhostTunnel/lists"}