full-disclosure - ICMP injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1130836034.5325.7.camel@anduril.intranet.cartel-securite.net>
Date: Tue Nov  1 09:07:27 2005
From: blancher at cartel-securite.fr (Cedric Blancher)
Subject: ICMP injection

Le mardi 01 novembre 2005 ? 00:11 -0600, Josh Perrymon a ?crit :
> Anyone familiar with injecting ICMP or DNS packets with NC?

You won't be able to inject ICMP with netcat (nc). Injecting DNS is
possible, but you have to craft your UDP payload yourslef.

You should try Scapy :

	http://www.secdev.org/projects/scapy/

Sort of Python shell to craft, inject packets and grab answers, with
lots of useful classes. You'll find examples, and in particular all ICMP
and DNS stuff you may need.

As an example, you can find a DNS request based traceroute onliner with
Scapy on page 3 of this article :

	http://sid.rstack.org/articles/0309_MISC_Traceroute_en.pdf

-- 
http://sid.rstack.org/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!