pen-test
[Top] [All Lists]

Re: TCP stack smashing

To: crazy frog crazy frog <i.m.crazy.frog@gmail.com>
Subject: Re: TCP stack smashing
From: "R. DuFresne" <dufresne@sysinfo.com>
Date: Mon, 19 Mar 2007 19:28:00 -0400 (EDT)
Cc: Nicolas RUFF <nicolas.ruff@gmail.com>, pen-test@securityfocus.com, bpmlist@sonic.net, pen-test-return-1078483754@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <41011d980703181009q100311cala3a5942fc0daa6a9@mail.gmail.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Organization: sysinfo.com
References: <1173405143.11617.ezmlm@securityfocus.com> <17909.66.129.224.36.1173398987.squirrel@webmail.sonic.net> <45F3D8A7.6080703@gmail.com> <Pine.LNX.4.64.0703141652130.27224@darkstar.sysinfo.com> <41011d980703181009q100311cala3a5942fc0daa6a9@mail.gmail.com>
Resent-date: Tue, 20 Mar 2007 07:20:46 -0700 (MST)
Resent-from: pen-test-return-1078483811@securityfocus.com
Resent-message-id: <20070320142046.8E30C147C4C@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Is that what it's now called?

I have this older version laying about:

isic-0.05.tgz, main credits to Mike Frantzen.

Never found a system I could not crash with that toolset. Sometimes including the sending system...

Thanks,

Ron DuFresne


On Sun, 18 Mar 2007, crazy frog crazy frog wrote:

PROTOS test suit??

On 3/15/07, R. DuFresne <dufresne@sysinfo.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 11 Mar 2007, Nicolas RUFF wrote:

>> I am looking for a tool that can be used to stress the tcp implementation
>> on our web/application server. I remember there used to be a tool called
>> EvilTCP that could be integrated
>> into the bsd/linux kernel to emulate a bad TCP implementation. However I
>> cannot find it on google. Can anybody help with this or do you know of any
>> similar utility that I can use to make malformed TCP transactions
>> (request/response).
>
> Not sure if this is what you are looking for, but the ISIC tools
> collection (and namely TCPSIC) can flood your server with bad TCP fragments.
>

If I recall, having played with those years ago, if used aggessivly, and
merely mildly aggessivly, there was not a TCP stack we could find that did
not get hosed to a state requiring a reboot to recover from.  Those are
not tools to be played in production envs fer sure.


Thanks,

Ron DuFresne
- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         admin & senior security consultant:  sysinfo.com
                         http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

...We waste time looking for the perfect lover
instead of creating the perfect love.

                 -Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFF+GEyst+vzJSwZikRAt3WAJ4yaeusg3z7q7FGiKlbTm8X7MVPDgCfcQjI
O4+NFqF2UKqGRbbnd3EZAl4=
=ASNd
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------






- -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

...We waste time looking for the perfect lover
instead of creating the perfect love.

                -Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFF/xyDst+vzJSwZikRAlViAJkBPR8zAPFn4OEOMkekQex+oBO6VACeJOSv
fFsTyoX9B4mI3e/r4/f5dGM=
=i+aM
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>