Packet generation and network based attacks with Scapy - SecDev.org
Packet generation and network based attacks with Scapy - SecDev.org
Packet generation and network based attacks with Scapy - SecDev.org
- No tags were found...
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Introduction<strong>Scapy</strong>Network discovery <strong>and</strong> <strong>attacks</strong>Probe once, interpret manyGenesisConceptsQuick overviewMain difference <strong>with</strong> other tools :The result of a probe is made ofthe list of couples (packet sent, packet received)the list of unreplied packetInterpretation/representation of the result is doneindependently=⇒ you can refine an interpretation <strong>with</strong>out needing a new probeExampleYou do a TCP scan on an host <strong>and</strong> see some open ports, aclosed one, <strong>and</strong> no answer for the others=⇒ you don’t need a new probe to check the TTL or the IPID ofthe answers <strong>and</strong> determine whether it was the same boxPhilippe BIONDI<strong>Packet</strong> <strong>generation</strong> <strong>and</strong> <strong>network</strong> <strong>based</strong> <strong>attacks</strong> <strong>with</strong> <strong>Scapy</strong>
Change language