ClsHack:Computer Security Blog    

Today I found an interesting script that uses the library python scapy both of which I have spoken to find Gateway :)
From the official website:

Gateway-finder is a scapy script that will help you determine which of the systems on the local LAN has IP forwarding enabled and which can reach the Internet.
This can be useful during Internal pentests when you want to quickly check for unauthorised routes to the Internet (e.g. rogue wireless access points) or routes to other Internal LANs. It doesn’t perform a hugely thorough check, but it is quick at least. It’s python, so it should be easy to modify if you need it to do something more sophisticated.

Download

https://github.com/pentestmonkey/gateway-finder
(more…)

I apologize if I have not responded to mail comments or different but are really messed up stuff between work and school and so I am a bit’ staccato :)

In the meantime, I jotted down a bit’ of rows to scan cookies from a package or from a pcap sniff real-time.
To do this decoding * I used my friend scapy :D

cookieGrep will be useful during a arp poisoning to see all the cookies that we pass and make a Session Hijacking using manual extensions firefox / chrome to edit the cookies in our browser :)
(more…)

On twitter I found a link that led to a pdf that documented the main functions scapy.

With scapy many things you can do really, of fuzzer, programs such as spoofing netcmd .

(more…)

Tcpjunk is a general TCP protocols testing and hacking utility.
 

• Supports IPv4/IPv6
• Automatically send/receive data according to predefined session setup
• Client/Server mode
• Supports SSL
• Dynamic data insertion and manipulation using tags
• Traffic generation
• GUI mode

First let's see how to install backbox :D

Dumping tcpjunk:
(more…)

Scapytain is a web application that allows you to organize the use of scapy :)

To install Scapytain, on a normal ubuntu I found an excellent tutorial on the web already working :)
(more…)