Section: .. / papers / protocols /
| /// File Name: |
Unverified_Fields_1.0.pdf |
Description:
|
The following problem (as discussed in this paper) has not yet been identified. Certain firewalls today, will not authenticate the validity of certain protocol fields within the packet they are processing. The risk is exposure of information, mainly unique patterns of behavior produced by the probed machines answering our crafted queries. Those patterns will help a malicious computer attacker to identify the operating systems in use. Postscript version available here.
| | Author: | Ofir Arkin | | Homepage: | http://www.sys-security.com/archive/papers | | File Size: | 55847 | | Last Modified: | Oct 15 15:36:08 2000 |
| MD5 Checksum: | 1cbb363d9d632889d80b6632248e326e |
|
| /// File Name: |
WAFUTFF.pdf |
Description:
|
Whitepaper entitled "Writing a fuzzer using the Fuzzled framework". The paper includes some of the techniques used to dismantle protocols including documentation, observation and static analysis.
| | Author: | Tim Brown | | Homepage: | http://www.nth-dimension.org.uk/ | | File Size: | 83733 | | Last Modified: | Sep 5 00:45:10 2007 |
| MD5 Checksum: | add66aa7259bcf872fdab3c30ab0c06d |
|
| /// File Name: |
whatuneed.txt |
Description:
|
Describes what you need to Spoof/Hijack/Predict sequence numbers. Meant for newbies who don't know what to use to execute those kind of attacks often seen in TCP/IP Security Documents.
| | Author: | Neonlenz | | Homepage: | http://www.mha1.8m.com | | File Size: | 3562 | | Last Modified: | Feb 24 15:21:25 2000 |
| MD5 Checksum: | 180651521dbb0b5abe9c56ea5fd4231b |
|
|
|
|
|