Skip to content

Instantly share code, notes, and snippets.

@timb-machine

timb-machine/ICMP info leaks

Last active November 15, 2025 08:46
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save timb-machine/969ed91901f80e0e5896ac0def57e531 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save timb-machine/969ed91901f80e0e5896ac0def57e531 to your computer and use it in GitHub Desktop.
Download ZIP
ICMP info leaks
Raw
ICMP info leaks
$ sudo nmap -sn 0.0.0.0/0
$ wireshark -f "icmp and dst host <my IP>"
...
Wireshark filter: "data.data and (!(data.data == 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00) and !(data.data == 10:11:12:13:14:15:16:17:18:19:1a:1b:1c:1d:1e:1f:20:21:22:23:24:25:26:27:28:29:2a:2b:2c:2d:2e:2f:30:31:32:33:34:35:36:37))"
Example: https://www.shodan.io/host/1.10.240.50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment