| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <45A333D6.6070003@gatech.edu>
Date: Tue, 09 Jan 2007 01:19:02 -0500
From: Matthew Flaschen <matthew.flaschen@...ech.edu>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: [Fwd: Re: 0trace - traceroute on established
connections]
X-Account-Key: account6
Return-Path: <woodzy.lists@...il.com>
Received: from boulder.mail.gatech.edu ([unix socket])
by boulder.mail.gatech.edu (Cyrus v2.1.18) with LMTP;
Mon, 08 Jan 2007 19:33:10 -0500
X-Sieve: CMU Sieve 2.2
Received: from deliverator6.gatech.edu (deliverator6.prism.gatech.edu
[130.207.171.126])
(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
(Client CN "deliverator6.gatech.edu",
Issuer "Tech Support CA" (verified OK))
by boulder.mail.gatech.edu (Postfix) with ESMTP id 681E83B687B
for <mflaschen3@...lder.mail.gatech.edu>;
Mon, 8 Jan 2007 19:33:10 -0500 (EST)
(envelope-from woodzy.lists@...il.com)
Received: from deliverator6.gatech.edu (localhost [127.0.0.1])
by localhost (Postfix) with SMTP id 025D918AF
for <matthew.flaschen@...ech.edu>; Mon, 8 Jan 2007 19:33:10 -0500 (EST)
(envelope-from woodzy.lists@...il.com)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.187])
by deliverator6.gatech.edu (Postfix) with ESMTP id 4BD9E182D
for <matthew.flaschen@...ech.edu>; Mon, 8 Jan 2007 19:33:09 -0500 (EST)
(envelope-from woodzy.lists@...il.com)
Received: by nf-out-0910.google.com with SMTP id x4so9681409nfb
for <matthew.flaschen@...ech.edu>; Mon, 08 Jan 2007 16:33:08 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth;
b=tXtVdLgaN5lgCRzgSssgbrsj3Yo22zAAu1EWqOaYTX+yHNkqPixSoE831EvMP9Z/FnuXQJOjSmczpYWGj1Wd2bo/prBy4VMu0M3JnIkhp2UTY+JosqWFXhWU8IdkRdTYt8Ey+7vXpOzM9wtrd3/JoVDqFxHo/j7En8MRZkv9+hc=
Received: by 10.82.120.14 with SMTP id s14mr2671922buc.1168302788656;
Mon, 08 Jan 2007 16:33:08 -0800 (PST)
Received: by 10.82.171.6 with HTTP; Mon, 8 Jan 2007 16:33:08 -0800 (PST)
Message-ID: <e41240040701081633j4d4551c1g99291f1ea27d9f81@...l.gmail.com>
Date: Mon, 8 Jan 2007 19:33:08 -0500
From: "Matt Wood" <matt.wood@...ech.edu>
Sender: woodzy.lists@...il.com
To: "Matthew Flaschen" <matthew.flaschen@...ech.edu>
Subject: Re: [Full-disclosure] 0trace - traceroute on established connections
In-Reply-To: <45A2C723.7020102@...ech.edu>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_69453_25580880.1168302788355"
References: <Pine.LNX.4.58.0701062331240.22436@...ne>
<45A2C723.7020102@...ech.edu>
X-Google-Sender-Auth: f3f1b707086590e3
X-GT-Spam-Rating: (7%)
X-GT-Spam-Details: No antispam rules were triggered by this message
X-GT-AVAS-Version: 5.2.1.279297, Antispam-Engine: 2.4.0.264935,
Antispam-Data: 2007.1.8.161932
------=_Part_69453_25580880.1168302788355
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Write a 5 second C program that is a wrapper for the usleep C library
function... none of this cruft is necessary.
-Matt
On 1/8/07, Matthew Flaschen <matthew.flaschen@...ech.edu> wrote:
>
> Michal Zalewski wrote:
> > I'd like to announce the availability of a free security reconnaissance
> /
> > firewall bypassing tool called 0trace.
>
> Good work. Are you going to put it under a free license?
>
> > Enough chatter - the tool is available here (Linux version):
> >
> > http://lcamtuf.coredump.cx/soft/0trace.tgz
> >
> > Note: this is a 30-minute hack that involves C code coupled with a
> cheesy
> > shellscript. It may not work on non-Linux systems, and may fail on some
> > Linuxes, too. It could be improved in a number of ways - so if you like
> > it, rewrite it.
>
> I've been trying to get it to work on Ubuntu Edgy. That system doesn't
> have usleep, so I made the following kludge:
> -------------------------------------------------------------------------
> if [[ ! -x /bin/usleep && ! -x /bin/sleep ]]; then
> echo "[-] Neither /bin/sleep nor /bin/usleep are found on this system,
> sorry." 1>&2
> exit 1
> fi
>
> usleep()
> {
> if [ -x /bin/usleep ]; then
> /bin/usleep $1
> elif [ -x /bin/sleep ]; then
> /bin/sleep $(echo ".000001 * $1" | bc)
> fi
> }
> -------------------------------------------------------------------------
>
> However, that leaves me with other problems:
>
> [+] Waiting for traffic from target on eth0...
> [+] Traffic acquired, waiting for a gap...
> ./0trace.sh: line 85: printf: 0x: invalid number
> ./0trace.sh: line 86: printf: 0x: invalid number
> [+] Target acquired: : -> : (0/0).
> [+] Setting up a sniffer...
> [+] Sending probes...
> Usage: ./sendprobe src_ip dst_ip sport dport seq ack
>
> I'm using Kubuntu Edgy. The bash version is 3.1.17(1)-release
> (i486-pc-linux-gnu). Anyone have tips?
>
> Thanks,
>
> Matthew Flaschen
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
------=_Part_69453_25580880.1168302788355
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Write a 5 second C program that is a wrapper for the usleep C library function... none of this cruft is necessary.<br><br>-Matt<br><br><div><span class="gmail_quote">On 1/8/07, <b class="gmail_sendername">Matthew Flaschen</b>
<<a href="mailto:matthew.flaschen@...ech.edu">matthew.flaschen@...ech.edu</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Michal Zalewski wrote:<br>> I'd like to announce the availability of a free security reconnaissance /<br>> firewall bypassing tool called 0trace.<br><br>Good work. Are you going to put it under a free license?<br>
<br>> Enough chatter - the tool is available here (Linux version):<br>><br>> <a href="http://lcamtuf.coredump.cx/soft/0trace.tgz">http://lcamtuf.coredump.cx/soft/0trace.tgz</a><br>><br>> Note: this is a 30-minute hack that involves C code coupled with a cheesy
<br>> shellscript. It may not work on non-Linux systems, and may fail on some<br>> Linuxes, too. It could be improved in a number of ways - so if you like<br>> it, rewrite it.<br><br>I've been trying to get it to work on Ubuntu Edgy. That system doesn't
<br>have usleep, so I made the following kludge:<br>-------------------------------------------------------------------------<br>if [[ ! -x /bin/usleep && ! -x /bin/sleep ]]; then<br> echo "[-] Neither /bin/sleep nor /bin/usleep are found on this system,
<br>sorry." 1>&2<br> exit 1<br>fi<br><br>usleep()<br>{<br> if [ -x /bin/usleep ]; then<br> /bin/usleep $1<br> elif [ -x /bin/sleep ]; then<br> /bin/sleep $(echo ".000001 * $1" | bc)<br> fi<br>
}<br>-------------------------------------------------------------------------<br><br>However, that leaves me with other problems:<br><br>[+] Waiting for traffic from target on eth0...<br>[+] Traffic acquired, waiting for a gap...
<br>./0trace.sh: line 85: printf: 0x: invalid number<br>./0trace.sh: line 86: printf: 0x: invalid number<br>[+] Target acquired: : -> : (0/0).<br>[+] Setting up a sniffer...<br>[+] Sending probes...<br>Usage: ./sendprobe src_ip dst_ip sport dport seq ack
<br><br>I'm using Kubuntu Edgy. The bash version is 3.1.17(1)-release<br>(i486-pc-linux-gnu). Anyone have tips?<br><br>Thanks,<br><br>Matthew Flaschen<br><br><br><br>_______________________________________________<br>
Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">
http://secunia.com/</a><br><br><br></blockquote></div><br>
------=_Part_69453_25580880.1168302788355--
Download attachment "signature.asc" of type "application/pgp-signature" (253 bytes)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists