pen-test
[Top] [All Lists]

Hping2, packet crafting question...

To: pen-test@securityfocus.com
Subject: Hping2, packet crafting question...
From: jasonisnow@gmail.com
Date: 20 Jul 2007 16:01:56 -0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Resent-date: Fri, 20 Jul 2007 14:11:52 -0600 (MDT)
Resent-from: pen-test-return-1078484643@securityfocus.com
Resent-message-id: <20070720201152.012B7144BD1@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
This is a long shot...

I have a situation where a user at a client is bypassing a proxy, changing his 
local routing table and internet browsing through a local modem, connected to a 
fax machine. Is there any way to to craft a packet to verify this is happening 
- stimulus/response type action? I've spoofed packets to see if he has his 
machine set up to auto-dial the modem when it sees traffic destined for a 
non-local subnet...

Obviously we don't want the user to know what we're doing...

Any stealthy ideas?

-->j

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Swap Out your SPI or Watchfire app sec solution for
Cenzic's robust, accurate risk assessment and management
solution FREE - limited Time Offer

http://www.cenzic.com/c/wf-spi
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>