IDS mailing list archives
Re: Worm attack generation tools
From: Dave Aitel <dave () immunityinc com>
Date: Fri, 01 Sep 2006 10:12:01 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 miaomitiff119 wrote:
Hi,:) Does anyone know any tools which can be used to simulate attack traffic (especially traffic pattern of worm attacks)? It is for the purpose of testing IDSs. I've looked at PACKIT and Netcat, but they can't generate "simultaneous" connections which is required for generating worm spreading behaviour...(or are there any ways to use PACKIT or Netcat to generate simultaneous connections?) Many thanks!:)
We've been using Nematode to generate worms for us ... but we're not at the stage of releasing it as a commercial tool. What sort of features are you looking for here? - -dave -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD4DBQFE+D+wB8JNm+PA+iURAql2AJsH6xsL5l+NbsDRYe7OWQQT1CivkgCYuLq6 zyCW8E2qeS6EkMIctEgu/w== =oTzx -----END PGP SIGNATURE----- ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. ------------------------------------------------------------------------
Current thread:
- Re: Worm attack generation tools Dave Aitel (Sep 02)