Penetration Testing mailing list archives

Re: Pen test of IP stack


From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Fri, 31 Aug 2007 09:35:19 +0300

Hello.

Have a look at:
  http://www.musecurity.com/products/mu-4000.html

2007/8/30, axmail () gmx com <axmail () gmx com>:
Hi,

I want to test a new developed network device against vulnerabilities in the IP stack.

I found already tools like nemesis or hping2 which makes me able to generate all kind of thinkable packets. But I 
realized also that I'm facing also hundreds of possible variations in the IP header.

Are there any tools which can already test the stack for the most common vulnerabilities such as the overlapping 
fragment attack, teardrop and other? In other words it should bombard the stack with invalid IP packets.

I also facing the same problem with DHCP and IGM.

Any help would be welcome and appreciated.

Regards,
Axel

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------




-- 
Best regards.
Gleb Pakharenko.

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: