SecTools

Yersinia

Jalal Rohani — Fri, 23 Jun 2006 20:08:58 +0000

Yersinia : A multi-protocol low-level attack tool Yersinia is a low-level protocol attack tool useful for penetration testing. It is capable of many diverse attacks over multiple protocols, such as becoming the root role in the Spanning Tree (Spanning Tree Protocol), creating virtual CDP (Cisco Discovery Protocol) neighbors, becoming the active router in a HSRP (Hot Standby Router Protocol) scenario, faking DHCP replies, and other low-level attacks.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Nemesis

Jalal Rohani — Fri, 23 Jun 2006 19:59:52 +0000

Nemesis : Packet injection simplified
The Nemesis Project is designed to be a commandline-based, portable human IP stack for UNIX/Linux (and now Windows!). The suite is broken down by protocol, and should allow for useful scripting of injected packet streams from simple shell scripts. If you enjoy Nemesis, you might also want to look at Hping2 as they complement each other well.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Scapy

Jalal Rohani — Fri, 23 Jun 2006 18:14:23 +0000

Scapy : Interactive packet manipulation tool Scapy is a powerful interactive packet manipulation tool, packet generator, network scanner, network discovery tool, and packet sniffer. It provides classes to interactively create packets or sets of packets, manipulate them, send them over the wire, sniff other packets from the wire, match answers and replies, and more. Interaction is provided by the Python interpreter, so Python programming structures can be used (such as variables, loops, and functions). Report modules are possible and easy to make.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Hping2

Jalal Rohani — Fri, 23 Jun 2006 13:50:56 +0000

Hping2 : A network probing utility like ping on steroids
This handy little utility assembles and sends custom ICMP, UDP, or TCP packets and then displays any replies. It was inspired by the ping command, but offers far more control over the probes sent. It also has a handy traceroute mode and supports IP fragmentation. This tool is particularly useful when trying to traceroute/ping/probe hosts behind a firewall that blocks attempts using the standard utilities. This often allows you to map out firewall rulesets. It is also great for learning more about TCP/IP and experimenting with IP protocols.

These icons link to social bookmarking sites where readers can share and discover new web pages.