<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><DIV>All you need is a tool that can craft packets to your desired specification. There are many choices out there. Google is your friend. So is Packetstorm and SecurityFocus.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR><DIV><DIV>On May 22, 2007, at 4:19 AM, Mohit Kohli wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"> <DIV class="Section1"><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">Hi Guys,<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">I got an assignment to write a white paper on TCP/IP and to show demo on how to exploits the same.<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">I have listed some of the vulnerability, but need <B><SPAN style="font-weight:bold">some good tools (preferably windows based) to exploit the vulnerability</SPAN></B> and to perform further analysis.<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P> <OL style="margin-top:0in" start="1" type="1"> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">overlapping IP fragments<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">Tear Drop<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">Land<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN lang="SV" style="font-size:10.0pt;font-family:Arial">SYN Attack<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN lang="SV" style="font-size:10.0pt;font-family:Arial">Ping Flooding<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN lang="SV" style="font-size:10.0pt;font-family:Arial">IP Spoofing<O:P></O:P></SPAN></FONT></LI> </OL><P class="MsoNormal" style="margin-left:.75in;text-indent:.25in"><FONT size="2" face="Arial"><SPAN lang="SV" style="font-size:10.0pt;font-family:Arial">SYN Guessing<O:P></O:P></SPAN></FONT></P><P class="MsoNormal" style="margin-left:.5in;text-indent:.5in"><FONT size="2" face="Arial"><SPAN lang="SV" style="font-size:10.0pt;font-family:Arial">Smurf Attack<O:P></O:P></SPAN></FONT></P> <OL style="margin-top:0in" start="7" type="1"> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">Source Routing<O:P></O:P></SPAN></FONT></LI> <LI class="MsoNormal" style="mso-list:l0 level1 lfo1"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">TCP Hijacking<O:P></O:P></SPAN></FONT></LI> </OL><P class="MsoNormal" style="margin-left:.75in;text-indent:.25in"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial">Man-in-the-Middle Attack<O:P></O:P></SPAN></FONT></P><P class="MsoNormal" style="margin-left:.75in;text-indent:.25in"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">I will appreciate; if you could provide me some inputs with regards to tools to exploits the vulnerability.<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">Cheers<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="3" face="Times New Roman"><SPAN style="font-size: 12.0pt">Mohit <O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="3" face="Times New Roman"><SPAN style="font-size: 12.0pt"><O:P> </O:P></SPAN></FONT></P> </DIV> <TABLE><TBODY><TR><TD bgcolor="#ffffff"><FONT color="#000000">============================================================================================================================<BR> <BR> Disclaimer:<BR> <BR> This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at <A href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</A> externally and <A href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</A> internally within Tech Mahindra.<BR> <BR> ============================================================================================================================<BR> </FONT></TD></TR></TBODY></TABLE><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Full-Disclosure - We believe in it.</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Charter: <A href="http://lists.grok.org.uk/full-disclosure-charter.html">http://lists.grok.org.uk/full-disclosure-charter.html</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Hosted and sponsored by Secunia - <A href="http://secunia.com">http://secunia.com</A>/</DIV> </BLOCKQUOTE></DIV><BR></DIV></BODY></HTML>