pen-test
[Top] [All Lists]

RE: TCP stack smashing

To: "R. DuFresne" <dufresne@sysinfo.com>, "crazy frog crazy frog" <i.m.crazy.frog@gmail.com>
Subject: RE: TCP stack smashing
From: "MARTIN Benoni" <benoni.martin@arcelor.com>
Date: Tue, 20 Mar 2007 16:37:53 +0100
Cc: "Nicolas RUFF" <nicolas.ruff@gmail.com>, <pen-test@securityfocus.com>, <bpmlist@sonic.net>, <pen-test-return-1078483754@securityfocus.com>
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <Pine.LNX.4.64.0703191923120.27662@darkstar.sysinfo.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Resent-date: Tue, 20 Mar 2007 14:28:03 -0700 (MST)
Resent-from: pen-test-return-1078483814@securityfocus.com
Resent-message-id: <20070320212803.70257145538@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
Thread-index: AcdrBXTFii8BFstGQd2FQIa0Z1qZTAAAC93A
Thread-topic: TCP stack smashing
Last version is 0.6 and is available here : 
http://www.packetfactory.net/Projects/ISIC/ 

-----Message d'origine-----
De : listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] De la 
part de R. DuFresne
Envoyé : mardi 20 mars 2007 00:28
À : crazy frog crazy frog
Cc : Nicolas RUFF; pen-test@securityfocus.com; bpmlist@sonic.net; 
pen-test-return-1078483754@securityfocus.com
Objet : Re: TCP stack smashing

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Is that what it's now called?

I have this older version laying about:

isic-0.05.tgz, main credits to Mike Frantzen.

Never found a system I could not crash with that toolset.  Sometimes including 
the sending system...

Thanks,

Ron DuFresne


On Sun, 18 Mar 2007, crazy frog crazy frog wrote:

> PROTOS test suit??
>
> On 3/15/07, R. DuFresne <dufresne@sysinfo.com> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> On Sun, 11 Mar 2007, Nicolas RUFF wrote:
>> 
>> >> I am looking for a tool that can be used to stress the tcp
>> implementation
>> >> on our web/application server. I remember there used to be a tool 
>> >> called EvilTCP that could be integrated into the bsd/linux kernel 
>> >> to emulate a bad TCP implementation. However I cannot find it on 
>> >> google. Can anybody help with this or do you know of
>> any
>> >> similar utility that I can use to make malformed TCP transactions 
>> >> (request/response).
>> >
>> > Not sure if this is what you are looking for, but the ISIC tools 
>> > collection (and namely TCPSIC) can flood your server with bad TCP
>> fragments.
>> >
>> 
>> If I recall, having played with those years ago, if used aggessivly, 
>> and merely mildly aggessivly, there was not a TCP stack we could find 
>> that did not get hosed to a state requiring a reboot to recover from.  
>> Those are not tools to be played in production envs fer sure.
>> 
>> 
>> Thanks,
>> 
>> Ron DuFresne
>> - --
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>          admin & senior security consultant:  sysinfo.com
>>                          http://sysinfo.com Key fingerprint = 9401 
>> 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629
>> 
>> ...We waste time looking for the perfect lover instead of creating 
>> the perfect love.
>>
>>                  -Tom Robbins <Still Life With Woodpecker> -----BEGIN 
>> PGP SIGNATURE-----
>> Version: GnuPG v1.4.5 (GNU/Linux)
>> 
>> iD8DBQFF+GEyst+vzJSwZikRAt3WAJ4yaeusg3z7q7FGiKlbTm8X7MVPDgCfcQjI
>> O4+NFqF2UKqGRbbnd3EZAl4=
>> =ASNd
>> -----END PGP SIGNATURE-----
>> 
>> ---------------------------------------------------------------------
>> ---
>> This List Sponsored by: Cenzic
>> 
>> Need to secure your web apps?
>> Cenzic Hailstorm finds vulnerabilities fast.
>> Click the link to buy it, try it or download Hailstorm for FREE.
>> 
>> http://www.cenzic.com/products_services/download_hailstorm.php?camp=7
>> 01600000008bOW
>> ---------------------------------------------------------------------
>> ---
>> 
>> 
>
>
>

- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         admin & senior security consultant:  sysinfo.com
                         http://sysinfo.com Key fingerprint = 9401 4B13 B918 
164C 647A  E838 B2DF AFCC 94B0 6629

....We waste time looking for the perfect lover instead of creating the perfect 
love.

                 -Tom Robbins <Still Life With Woodpecker> -----BEGIN PGP 
SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFF/xyDst+vzJSwZikRAlViAJkBPR8zAPFn4OEOMkekQex+oBO6VACeJOSv
fFsTyoX9B4mI3e/r4/f5dGM=
=i+aM
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>