Re: [PEN-TEST] ICMP push

[Ofir Arkin <ofir () ITCON-LTD COM>]

You should take a look at SING. SING is written by the same author - Andreas
Alfredo Omella and has better functionality.
www.sourceforge.net/projects/sing.

I would also recommend you reading my paper "ICMP Usage In Scanning"
available from
www.sys-security.com, to understand the various tweaks and tricks with ICMP.

If packet shaping is your business, than have a look a Max vision's web
site:
http://whitehats.com/tools/packetshaping/.


Ofir Arkin  [ofir () itcon-ltd com]
Senior Security Analyst
Chief of Grey Hats
ITcon, Israel.
http://www.itcon-ltd.com

Personal Web page: http://www.sys-security.com

"Opinions expressed do not necessarily
represent the views of my employer."


-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of Oliver Petruzel
Sent: Monday, September 18, 2000 3:36 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: [PEN-TEST] ICMP push


Dearest compadres, again.

Has anyone ever heard of a tool named "ICMPpush"? or something similar?
which works a s an ICMP-specific packet builder for various ICMP types.
It is my understanding (or lack thereof) that on dummy terms or other
hosts which may (firewall or otherwise) prevent normal ICMP traffic, may
indeed allow other types through for various "are you alive?" purposes.

correct me, please! if I am wrong.

./Oliver


-----------------------------------------------
FREE! The World's Best Email Address @email.com
Reserve your name now at http://www.email.com