Pen test of IP stack

From: axmail@gmx.com
Date: Thu Aug 30 2007 - 04:10:05 EDT


Hi,

I want to test a new developed network device against vulnerabilities in the IP stack.

I found already tools like nemesis or hping2 which makes me able to generate all kind of thinkable packets. But I realized also that I'm facing also hundreds of possible variations in the IP header.

Are there any tools which can already test the stack for the most common vulnerabilities such as the overlapping fragment attack, teardrop and other? In other words it should bombard the stack with invalid IP packets.

I also facing the same problem with DHCP and IGM.

Any help would be welcome and appreciated.

Regards,
Axel

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:04 EDT