full-disclosure - Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 13 Nov 2011 13:05:11 +1100
From: dave bl <db.pub.mail@...il.com>
To: Darren Martyn <d.martyn.fulldisclosure@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Microsoft Windows vulnerability in TCP/IP
 Could Allow Remote Code Execution (2588516)

On 13 November 2011 04:27, Darren Martyn
<d.martyn.fulldisclosure@...il.com> wrote:
> Off topic (kinda) but with all this talk on SCAPY, has anyone a good
> reference on using it IN a python script for crafting/reading packets? Me
> and a friend wanted to write a python version of Ettercap/dsniff using the
> SCAPY libraries as a challenge and as a learning experience. Even if we can
> just get some reliable ARP poisoning to work with it we will be pretty
> happy, and will have learned something. Any good literature?

A challenge you say?  ....

Help on function arpcachepoison in module scapy.layers.l2:

arpcachepoison(target, victim, interval=60)
    Poison target's cache with (your MAC,victim's IP) couple
    arpcachepoison(target, victim, [interval=60]) -> None

The official Scapy site has good documentation[0]

[0] http://www.secdev.org/projects/scapy/doc/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/