IDS mailing list archives

Re: Worm attack generation tools


From: Dave Aitel <dave () immunityinc com>
Date: Fri, 01 Sep 2006 10:12:01 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

miaomitiff119 wrote:
Hi,:) Does anyone know any tools which can be used to simulate
attack traffic (especially traffic pattern of worm attacks)? It is
for the purpose of testing IDSs. I've looked at PACKIT and Netcat,
but they can't generate "simultaneous" connections which is
required for generating worm spreading behaviour...(or are there
any ways to use PACKIT or Netcat to generate simultaneous
connections?)

Many thanks!:)
We've been using Nematode to generate worms for us ... but we're not
at the stage of releasing it as a commercial tool. What sort of
features are you looking for here?

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD4DBQFE+D+wB8JNm+PA+iURAql2AJsH6xsL5l+NbsDRYe7OWQQT1CivkgCYuLq6
zyCW8E2qeS6EkMIctEgu/w==
=oTzx
-----END PGP SIGNATURE-----


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------


Current thread: