Re: TCP stack smashing

From: crazy frog crazy frog (i.m.crazy.frog@gmail.com)
Date: Sun Mar 18 2007 - 12:09:38 EST


PROTOS test suit??

On 3/15/07, R. DuFresne <dufresne@sysinfo.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sun, 11 Mar 2007, Nicolas RUFF wrote:
>
> >> I am looking for a tool that can be used to stress the tcp implementation
> >> on our web/application server. I remember there used to be a tool called
> >> EvilTCP that could be integrated
> >> into the bsd/linux kernel to emulate a bad TCP implementation. However I
> >> cannot find it on google. Can anybody help with this or do you know of any
> >> similar utility that I can use to make malformed TCP transactions
> >> (request/response).
> >
> > Not sure if this is what you are looking for, but the ISIC tools
> > collection (and namely TCPSIC) can flood your server with bad TCP fragments.
> >
>
> If I recall, having played with those years ago, if used aggessivly, and
> merely mildly aggessivly, there was not a TCP stack we could find that did
> not get hosed to a state requiring a reboot to recover from. Those are
> not tools to be played in production envs fer sure.
>
>
> Thanks,
>
> Ron DuFresne
> - --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> admin & senior security consultant: sysinfo.com
> http://sysinfo.com
> Key fingerprint = 9401 4B13 B918 164C 647A E838 B2DF AFCC 94B0 6629
>
> ...We waste time looking for the perfect lover
> instead of creating the perfect love.
>
> -Tom Robbins <Still Life With Woodpecker>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
>
> iD8DBQFF+GEyst+vzJSwZikRAt3WAJ4yaeusg3z7q7FGiKlbTm8X7MVPDgCfcQjI
> O4+NFqF2UKqGRbbnd3EZAl4=
> =ASNd
> -----END PGP SIGNATURE-----
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
>
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
> ------------------------------------------------------------------------
>
>

-- 
---------------------------------------
http://www.secgeeks.com
get a blog on secgeeks :)
register here:-
http://secgeeks.com/user/register
rss feeds :-
http://secgeeks.com/node/feed
Submit you security articles,send them to secgeek@secgeeks.com
http://www.newskicks.com
Submit and kick for new stories from all around the world.
---------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:40 EDT