full-disclosure - looking for this tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <C1BFF1E40C5B98468C6A9B0BA0A3EA2BF5FDC1@infosvrs02.infosec.net>
Date: Thu, 14 Jan 2010 18:02:51 +0900
From: 김무성 <kimms@...osec.co.kr>
To: <full-disclosure@...ts.grok.org.uk>,
	<pen-test@...urityfocus.com>
Subject: looking for this tools

Hello list.

I’m pen testing IPTV.

Example)

Monitor - IPTV STB - PC(attacker) - VDSL modem - internet

PC has two NIC

Two NIC are bridge mode

IPTV STB sends request packet for knowing that where is specific file for playing.

To server port 8080.

POST /VoD/whereisvod.cgi

a1d1.mpg

Server’s response is 

HTTP/1.1 200 OK

192.168.10.10

And then

IPTV STB sends RTSP packet to 192.168.10.10.

To server port 554

           DESCRIBE a1d1.mpg

And play.

I wanna edit this file name. (a1d1.mpg is free, a1d2.mpg not free)

POST /VoD/whereisvod.cgi

a1d2.mpg

DESCRIBE a1d2.mpg

For this, I have to packet sniffing and blocking them and manipulation packet and resend.

Are there tools?

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/