[From nobody Thu Jul 10 02:06:10 2008
X-Account-Key: account6
Return-Path: <woodzy.lists@gmail.com>
Received: from boulder.mail.gatech.edu ([unix socket])
	by boulder.mail.gatech.edu (Cyrus v2.1.18) with LMTP;
	Mon, 08 Jan 2007 19:33:10 -0500
X-Sieve: CMU Sieve 2.2
Received: from deliverator6.gatech.edu (deliverator6.prism.gatech.edu
	[130.207.171.126])
	(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
	(Client CN "deliverator6.gatech.edu",
	Issuer "Tech Support CA" (verified OK))
	by boulder.mail.gatech.edu (Postfix) with ESMTP id 681E83B687B
	for <mflaschen3@boulder.mail.gatech.edu>;
	Mon,  8 Jan 2007 19:33:10 -0500 (EST)
	(envelope-from woodzy.lists@gmail.com)
Received: from deliverator6.gatech.edu (localhost [127.0.0.1])
	by localhost (Postfix) with SMTP id 025D918AF
	for <matthew.flaschen@gatech.edu>; Mon,  8 Jan 2007 19:33:10 -0500 (EST)
	(envelope-from woodzy.lists@gmail.com)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.187])
	by deliverator6.gatech.edu (Postfix) with ESMTP id 4BD9E182D
	for <matthew.flaschen@gatech.edu>; Mon,  8 Jan 2007 19:33:09 -0500 (EST)
	(envelope-from woodzy.lists@gmail.com)
Received: by nf-out-0910.google.com with SMTP id x4so9681409nfb
	for <matthew.flaschen@gatech.edu>; Mon, 08 Jan 2007 16:33:08 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth;
	b=tXtVdLgaN5lgCRzgSssgbrsj3Yo22zAAu1EWqOaYTX+yHNkqPixSoE831EvMP9Z/FnuXQJOjSmczpYWGj1Wd2bo/prBy4VMu0M3JnIkhp2UTY+JosqWFXhWU8IdkRdTYt8Ey+7vXpOzM9wtrd3/JoVDqFxHo/j7En8MRZkv9+hc=
Received: by 10.82.120.14 with SMTP id s14mr2671922buc.1168302788656;
	Mon, 08 Jan 2007 16:33:08 -0800 (PST)
Received: by 10.82.171.6 with HTTP; Mon, 8 Jan 2007 16:33:08 -0800 (PST)
Message-ID: <e41240040701081633j4d4551c1g99291f1ea27d9f81@mail.gmail.com>
Date: Mon, 8 Jan 2007 19:33:08 -0500
From: "Matt Wood" <matt.wood@gatech.edu>
Sender: woodzy.lists@gmail.com
To: "Matthew Flaschen" <matthew.flaschen@gatech.edu>
Subject: Re: [Full-disclosure] 0trace - traceroute on established connections
In-Reply-To: <45A2C723.7020102@gatech.edu>
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_69453_25580880.1168302788355"
References: <Pine.LNX.4.58.0701062331240.22436@dione>
	<45A2C723.7020102@gatech.edu>
X-Google-Sender-Auth: f3f1b707086590e3
X-GT-Spam-Rating: (7%)
X-GT-Spam-Details: No antispam rules were triggered by this message
X-GT-AVAS-Version: 5.2.1.279297, Antispam-Engine: 2.4.0.264935,
	Antispam-Data: 2007.1.8.161932

------=_Part_69453_25580880.1168302788355
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Write a 5 second C program that is a wrapper for the usleep C library
function... none of this cruft is necessary.

-Matt

On 1/8/07, Matthew Flaschen <matthew.flaschen@gatech.edu> wrote:
>
> Michal Zalewski wrote:
> > I'd like to announce the availability of a free security reconnaissance
> /
> > firewall bypassing tool called 0trace.
>
> Good work.  Are you going to put it under a free license?
>
> > Enough chatter - the tool is available here (Linux version):
> >
> >   http://lcamtuf.coredump.cx/soft/0trace.tgz
> >
> > Note: this is a 30-minute hack that involves C code coupled with a
> cheesy
> > shellscript. It may not work on non-Linux systems, and may fail on some
> > Linuxes, too. It could be improved in a number of ways - so if you like
> > it, rewrite it.
>
> I've been trying to get it to work on Ubuntu Edgy.  That system doesn't
> have usleep, so I made the following kludge:
> -------------------------------------------------------------------------
> if [[ ! -x /bin/usleep && ! -x /bin/sleep ]]; then
>   echo "[-] Neither /bin/sleep nor /bin/usleep are found on this system,
> sorry." 1>&2
>   exit 1
> fi
>
> usleep()
> {
>   if [ -x /bin/usleep ]; then
>     /bin/usleep $1
>   elif [ -x /bin/sleep ]; then
>     /bin/sleep $(echo ".000001 * $1" | bc)
>   fi
> }
> -------------------------------------------------------------------------
>
> However, that leaves me with other problems:
>
> [+] Waiting for traffic from target on eth0...
> [+] Traffic acquired, waiting for a gap...
> ./0trace.sh: line 85: printf: 0x: invalid number
> ./0trace.sh: line 86: printf: 0x: invalid number
> [+] Target acquired: : -> : (0/0).
> [+] Setting up a sniffer...
> [+] Sending probes...
> Usage: ./sendprobe src_ip dst_ip sport dport seq ack
>
> I'm using Kubuntu Edgy.  The bash version is 3.1.17(1)-release
> (i486-pc-linux-gnu).  Anyone have tips?
>
> Thanks,
>
> Matthew Flaschen
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>

------=_Part_69453_25580880.1168302788355
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Write a 5 second C program that is a wrapper for the usleep C library function... none of this cruft is necessary.<br><br>-Matt<br><br><div><span class="gmail_quote">On 1/8/07, <b class="gmail_sendername">Matthew Flaschen</b>
 <<a href="mailto:matthew.flaschen@gatech.edu">matthew.flaschen@gatech.edu</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Michal Zalewski wrote:<br>> I'd like to announce the availability of a free security reconnaissance /<br>> firewall bypassing tool called 0trace.<br><br>Good work.  Are you going to put it under a free license?<br>
<br>> Enough chatter - the tool is available here (Linux version):<br>><br>>   <a href="http://lcamtuf.coredump.cx/soft/0trace.tgz">http://lcamtuf.coredump.cx/soft/0trace.tgz</a><br>><br>> Note: this is a 30-minute hack that involves C code coupled with a cheesy
<br>> shellscript. It may not work on non-Linux systems, and may fail on some<br>> Linuxes, too. It could be improved in a number of ways - so if you like<br>> it, rewrite it.<br><br>I've been trying to get it to work on Ubuntu Edgy.  That system doesn't
<br>have usleep, so I made the following kludge:<br>-------------------------------------------------------------------------<br>if [[ ! -x /bin/usleep && ! -x /bin/sleep ]]; then<br>  echo "[-] Neither /bin/sleep nor /bin/usleep are found on this system,
<br>sorry." 1>&2<br>  exit 1<br>fi<br><br>usleep()<br>{<br>  if [ -x /bin/usleep ]; then<br>    /bin/usleep $1<br>  elif [ -x /bin/sleep ]; then<br>    /bin/sleep $(echo ".000001 * $1" | bc)<br>  fi<br>
}<br>-------------------------------------------------------------------------<br><br>However, that leaves me with other problems:<br><br>[+] Waiting for traffic from target on eth0...<br>[+] Traffic acquired, waiting for a gap...
<br>./0trace.sh: line 85: printf: 0x: invalid number<br>./0trace.sh: line 86: printf: 0x: invalid number<br>[+] Target acquired: : -> : (0/0).<br>[+] Setting up a sniffer...<br>[+] Sending probes...<br>Usage: ./sendprobe src_ip dst_ip sport dport seq ack
<br><br>I'm using Kubuntu Edgy.  The bash version is 3.1.17(1)-release<br>(i486-pc-linux-gnu).  Anyone have tips?<br><br>Thanks,<br><br>Matthew Flaschen<br><br><br><br>_______________________________________________<br>
Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">
http://secunia.com/</a><br><br><br></blockquote></div><br>

------=_Part_69453_25580880.1168302788355--

]