Re: Pen test of IP stack

From: Zed Qyves (zqyves.spamtrap@gmail.com)
Date: Fri Aug 31 2007 - 02:40:25 EDT


hello,
I would also give scapy (last time I checked it was athttp://www.secdev.org/projects/scapy/) a try.It is python and you can easily script it to run through all thedifferent options
ZQ
On 8/30/07, axmail@gmx.com <axmail@gmx.com> wrote:> Hi,>> I want to test a new developed network device against vulnerabilities in the IP stack.>> I found already tools like nemesis or hping2 which makes me able to generate all kind of thinkable packets. But I realized also that I'm facing also hundreds of possible variations in the IP header.>> Are there any tools which can already test the stack for the most common vulnerabilities such as the overlapping fragment attack, teardrop and other? In other words it should bombard the stack with invalid IP packets.>> I also facing the same problem with DHCP and IGM.>> Any help would be welcome and appreciated.>> Regards,> Axel>> ------------------------------------------------------------------------> This list is sponsored by: Cenzic>> Need to secure your web apps NOW?> Cenzic finds more, "real" vulnerabilities fast.> Click to try it, buy it or download a solution FREE today!>> http://www.cenzic.com/downloads> -----------------------------------------------------
------------------->>

-- ---------------------------------------------------------------------Κρέωνἐν τῇδ᾽ ἔφασκε γῇ· τὸ δὲ ζητούμενονἁλωτόν, ἐκφεύγειν δὲ τἀμελούμενον.Οιδίπους Τύρρανος [110]---------------------------------------------------------------------CreonIn this our land, so said he, those who seek Shall find; unsought, welose it utterly.Oedipus Rex [110]---------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:05 EDT