Penetration Testing mailing list archives
RE: Pen test of IP stack
From: "J.M. Seitz" <lists () bughunter ca>
Date: Thu, 30 Aug 2007 11:19:51 -0700
Are there any tools which can already test the stack for the most common vulnerabilities such as the overlapping fragment attack, teardrop and other?
Yes, you can look at ISIC, it's a great TCP/IP stack fuzzer http://www.packetfactory.net/Projects/ISIC/ If you are looking for specific attacks then you will probably need to use something IMPacket (Python) or nemesis to create those exact scenarios. JS ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Pen test of IP stack axmail (Aug 30)
- RE: Pen test of IP stack J.M. Seitz (Aug 30)
- Re: Pen test of IP stack Gleb Paharenko (Aug 31)
- Re: Pen test of IP stack Jerome Athias (Aug 31)
- Re: Pen test of IP stack Zed Qyves (Aug 31)