Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: Pen test of IP stack

Subject: Re: Pen test of IP stack
Date: Fri, 31 Aug 2007 09:40:25 +0300
hello,

I would also give scapy (last time I checked it was at
http://www.secdev.org/projects/scapy/) a try.
It is python and you can easily script it to run through all the
different options

ZQ

On 8/30/07, axmail@gmx.com <axmail@gmx.com> wrote:
Hi,

I want to test a new developed network device against vulnerabilities in the 
IP stack.

I found already tools like nemesis or hping2 which makes me able to generate 
all kind of thinkable packets. But I realized also that I'm facing also 
hundreds of possible variations in the IP header.

Are there any tools which can already test the stack for the most common 
vulnerabilities such as the overlapping fragment attack, teardrop and other? 
In other words it should bombard the stack with invalid IP packets.

I also facing the same problem with DHCP and IGM.

Any help would be welcome and appreciated.

Regards,
Axel

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




-- 
---------------------------------------------------------------------
ÎÏÎÏÎ
áÎ ÏáÎá áÏÎÏÎÎ Îá Ïá Îá ÎÎÏÎÏÎÎÎÎÎ
áÎÏÏÏÎ, áÎÏÎÏÎÎÎÎ Îá ÏáÎÎÎÎÏÎÎÎÎÎ.
ÎÎÎÎÏÎÏÏ ÎÏÏÏÎÎÎÏ [110]
---------------------------------------------------------------------
Creon
In this our land, so said he, those who seek  Shall find; unsought, we
lose it utterly.
Oedipus Rex [110]
---------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>