Penetration Testing mailing list archives
RE: TTL DB
From: "Shenk, Jerry A" <jshenk () decommunications com>
Date: Thu, 29 Dec 2005 08:00:14 -0500
P0f is another program along that line (http://lcamtuf.coredump.cx/p0f.shtml) . Michael Zalewski has also written a book. "Silence on the Wire" about this whole issue....not just the packet header peculiarities of different OS' but all kinds of ways to detect activity based passively. I'm not sure it's going to be a "complete DB" - you'll have to do some of your own legwork but p0f is another rung on the ladder. -----Original Message----- From: Christophe Herault [mailto:cherault () venesege com] Sent: Wednesday, December 28, 2005 4:49 PM To: pen-test () securityfocus com Subject: TTL DB Dear all, I saw the Lance Spitzner's DB for checking the flag value "win" and "TTL". It's a great job, but i need to have a more complete DB. Is anyone heard about a complete DB of this type ? Regards. -- Christophe Herault <cherault () venesege com> www.venesege.com Caracas - Venezuela Tel : 0412-596-7932 IP Security Consultant ---------------------- GPG Key Id : 0xC5D194C6 Fingerprint :30FA 5052 3B61 138A 159B 702C 572F 3682 C5D1 94C6 ------------------------------------------------------------------------ ------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 ------------------------------------------------------------------------ ------- **DISCLAIMER This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business. ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- TTL DB Christophe Herault (Dec 28)
- Re: TTL DB Joachim Schipper (Dec 29)
- Re: TTL DB Moussa Diallo (Dec 29)
- Pentesting Network Share Access via wireless sherwyn williams (Dec 31)
- <Possible follow-ups>
- RE: TTL DB Shenk, Jerry A (Dec 29)