Penetration Testing mailing list archives

Re: Strange server test tool


From: "Hariharan" <harij22 () gmail com>
Date: Tue, 21 Feb 2006 14:05:00 +0530

Again assuming that Src IP is something that you are not modifying. "curl" shall do the trick in most cases, it is fairly advanced, and gives one mutiple options.

Hariharan

----- Original Message ----- From: "Anders Thulin" <Anders.Thulin () tietoenator com> To: "Luchino - Samel" <samelinux () gmail com>; <pen-test () lists securityfocus com>
Sent: Monday, February 20, 2006 1:14 PM
Subject: RE: Strange server test tool


From: Luchino - Samel [mailto:samelinux () gmail com]

The tool i'm watching for have to send a raw http packet with
a http request for a page from a specified IP

 I assume the src IP is not something you're faking ...

 netcat seems the simplest, wget is also possible, and there is a rather
nice toolkit called ELZA, which can be very useful if you need
to make decisions depepdning on what you are receiving.  ELZA could
fairly easily do this job, but it may be that you can by with a simpler
solution.  ELZA doesn't do 'raw' packets, but you get to specifiy all (?)
options and parameters for a HTTP request.

Anders Thulin   anders.thulin () tietoenator com   040-661 50 63
TietoEnator Telecom & Media AB, Box 85, SE-201 20 Malmö



------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: