Re: NGSEC's penetration test sniffer

From: Anders Thulin (Anders.Thulin@kiconsulting.se)
Date: Fri Sep 27 2002 - 02:30:37 EDT


Muhammad Faisal Rauf Danka wrote:

> There is another commandline sniffer available, named tethereal.
> http://www.ethereal.com/tethereal.1.html

   tethereal is a bit more messy to use for pen-test purposes, though
-- by which I mean 'insert in target systems for sniffing out passwords
on their network'. In particular it needs WinPcap to be installed. And,
of course, you really need to be able to uninstall WinPcap once the
job is finished.

  Or is it just that I haven't figured out how install and uninstall
WinPCap using only a command line or batch interface?

   From the point of the software developer, there is also the DLC
interface, which I think is included in all Win32 environments and allows
sending/recieving of raw Ethernet frames (or at least claims to --
I've not got it to work myself, getting all tangled up in CCBs).

-- 
Anders Thulin   anders.thulin@kiconsulting.se   040-661 50 63	
Ki Consulting AB, Box 85, SE-201 20 Malmö, Sweden
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:25 EDT