full-disclosure - ICMP injection

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Tue Nov  1 09:07:27 2005
From: blancher at cartel-securite.fr (Cedric Blancher)
Subject: ICMP injection

Le mardi 01 novembre 2005 ? 00:11 -0600, Josh Perrymon a ?crit :
> Anyone familiar with injecting ICMP or DNS packets with NC?

You won't be able to inject ICMP with netcat (nc). Injecting DNS is
possible, but you have to craft your UDP payload yourslef.

You should try Scapy :

	http://www.secdev.org/projects/scapy/

Sort of Python shell to craft, inject packets and grab answers, with
lots of useful classes. You'll find examples, and in particular all ICMP
and DNS stuff you may need.

As an example, you can find a DNS request based traceroute onliner with
Scapy on page 3 of this article :

	http://sid.rstack.org/articles/0309_MISC_Traceroute_en.pdf

-- 
http://sid.rstack.org/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!