The host does not need to have a listening sockets / listening services active, as all UDP packets are received into the user space via opening a raw socket Executes a command on the host which is specified in the magic packet and returns the output to the remote host, supporting a “reverse shell” type functionality. The mutex file contains the PID of the process Acknowledge it is alive by responding to any TCP packet on any port number with an empty TCP packet with both the RST and ACK flags set. The beacon response packet that is sent back to the probing host is manually assembled, copying the incoming packet’s relevant IP and TCP header fields into the outgoing beacon packet.