Skip to content

mod_network

Authorized Use Only

Espilon is a security research and educational tool. Use it only on devices and networks you own or are explicitly authorized in writing to test.

Network toolkit for an agent on the local segment: host discovery, reachability testing, a TCP stress generator, and a reverse tunnel back to the operator. Written as an ESPM module (espm.h, daemon + commands pattern).

Commands

Command Arguments Description
ping <host\|ip> [count] ICMP echo (DNS supported). Default 4 packets.
scan <a.b.c> [start] [end] ICMP sweep of a /24. Defaults to .1 through .254.
arp_scan [prefix] ICMP sweep; auto-detects the local /24 if no prefix is given.
arp_listen [ms] Passive 802.11 host discovery for the given duration.
dos_tcp <ip> <port> <count> TCP connection flood (runs in a background task).
tun_start <server_ip> [port] Open a reverse tunnel to the C3PO tunnel server.
tun_stop Tear down the tunnel.
tun_status Report tunnel state.

Reverse tunnel

tun_start connects outbound from the agent to a C3PO-side tunnel server and authenticates with the espilon-tunnel-v1 handshake, letting the operator route traffic through the target-side ESP32. This replaces the standalone SOCKS5 tunnel that older documentation described as a C3PO feature: tunnelling is a module capability.

Warning

dos_tcp and the tunnel are high-impact. Use them only in a lab or an authorized engagement.

See also