Re: Pen test of IP stack

From: Marcus (mcwimp@gmail.com)
Date: Sun Sep 02 2007 - 10:22:42 EDT


There is a 0.07 version of ISIC (it's a fork from what it looks like)
on SF:

http://isic.sourceforge.net/

Haven't tried it just saw it a while back.

Cheers

On 8/30/07, J.M. Seitz <lists@bughunter.ca> wrote:
> >
> > Are there any tools which can already test the stack for the
> > most common vulnerabilities such as the overlapping fragment
> > attack, teardrop and other?
>
> Yes, you can look at ISIC, it's a great TCP/IP stack fuzzer
> http://www.packetfactory.net/Projects/ISIC/ If you are looking for specific
> attacks then you will probably need to use something IMPacket (Python) or
> nemesis to create those exact scenarios.
>
> JS
>
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: Cenzic
>
> Need to secure your web apps NOW?
> Cenzic finds more, "real" vulnerabilities fast.
> Click to try it, buy it or download a solution FREE today!
>
> http://www.cenzic.com/downloads
> ------------------------------------------------------------------------
>
>

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:05 EDT