Re: Mac spoofing using libnet

From: infos@aql.fr
Date: 03/25/02


Date: Mon, 25 Mar 2002 11:13:05 +0100
From: "infos@aql.fr" <infos@aql.fr>
To: "pen-test@securityfocus.com" <pen-test@securityfocus.com>


Hello,

> I'm currently looking at a system which seems to avoid using
> ARP to resolve a mac address. Instead, it's looking at the mac
> address embedded in the packet.
> I was wondering, if there are any tools built around Libnet
> (or similar) which are able to handle a whole tcp/IP session.
I am not really sure to understand your needs.

However, you might want to take a look at tool 171 of lcrzoex.
It works under Linux, Windows, xBSD, Solaris.
Read documentation available at :
  http://www.laurentconstantin.com/common/lcrzoex/doc/en/examples.html

Lcrzoex is at :
  http://www.laurentconstantin.com/
  http://go.to/laurentconstantin/
  http://laurentconstantin.est-la.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)