Re: Pen test of IP stack

From: Gleb Paharenko (gpaharenko@gmail.com)
Date: Fri Aug 31 2007 - 02:35:19 EDT


Hello.

Have a look at:
  http://www.musecurity.com/products/mu-4000.html

2007/8/30, axmail@gmx.com <axmail@gmx.com>:
> Hi,
>
> I want to test a new developed network device against vulnerabilities in the IP stack.
>
> I found already tools like nemesis or hping2 which makes me able to generate all kind of thinkable packets. But I realized also that I'm facing also hundreds of possible variations in the IP header.
>
> Are there any tools which can already test the stack for the most common vulnerabilities such as the overlapping fragment attack, teardrop and other? In other words it should bombard the stack with invalid IP packets.
>
> I also facing the same problem with DHCP and IGM.
>
> Any help would be welcome and appreciated.
>
> Regards,
> Axel
>
> ------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
> ------------------------------------------------------------------------
>
>

-- 
Best regards.
Gleb Pakharenko.
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:05 EDT