Lines 1-31
Link Here
|
1 |
The Nemesis Project is designed to be a commandline-based, portable human IP |
1 |
The Nemesis Project is designed to be a command line based, portable human IP |
2 |
stack for UNIX/Linux. The suite is broken down by protocol, and should allow |
2 |
stack for UNIX-like and Windows sytems. The suite is broken down by protocol, |
3 |
for useful scripting of injected packet streams from simple shell scripts. |
3 |
and should allow for useful scripting of injected packets from simple shell |
|
|
4 |
scripts. |
4 |
|
5 |
|
5 |
Key Features: |
6 |
Key Features: |
6 |
|
7 |
|
7 |
+ ARP/RARP, DNS, ICMP, IGMP, OSPF, RIP, TCP, UDP protocol support |
8 |
+ ARP/RARP, DNS, ETHERNET, ICMP, IGMP, IP, OSPF*, RIP, TCP, UDP protocol support |
8 |
+ Layer 2 or Layer 3 injection (by presence/absence of -d <dev> switch) |
9 |
+ Layer 2 or Layer 3 injection (by presence/absence of -d <dev> switch) |
9 |
+ Packet Payload from file |
10 |
on UNIX-like systems. |
10 |
+ tested on OpenBSD, NetBSD, FreeBSD, Solaris/Trusted Solaris, Linux, |
11 |
+ Layer 2 injection on Windows systems (regardless of whether |
11 |
and Mac OS X |
12 |
-d <device number> is used. |
|
|
13 |
+ Packet payload from file |
14 |
+ IP and TCP options from file |
15 |
+ Tested on OpenBSD, Linux, Solaris, Mac OS X and Windows 2000 |
12 |
|
16 |
|
13 |
Example usage: |
17 |
Each supported protocol uses its own protocol "injector" which is accompanied |
|
|
18 |
by a man page explaning its functionality. |
14 |
|
19 |
|
15 |
* nemesis-tcp -v -S 192.168.1.1 -D 192.168.2.2 -fS -fA -y 22 -P foo |
|
|
16 |
send TCP packet (SYN/ACK) with payload from ascii file 'foo' to target's |
17 |
ssh port from 192.168.1.1 to 192.168.2.2. (-v allows a stdout visual of |
18 |
current injected packet) |
19 |
|
20 |
* nemesis-icmp -S 10.10.10.3 -D 10.10.10.1 -G 10.10.10.3 -i 5 |
21 |
send ICMP REDIRECT (network) packet from 10.10.10.3 to 10.10.10.1 |
22 |
with preferred gateway as source address. |
23 |
|
24 |
* nemesis-arp -v -d ne0 -H 0:1:2:3:4:5 -S 10.11.30.5 -D 10.10.15.1 |
25 |
send ARP packet through device 'ne0' from hardware source address |
26 |
00:01:02:03:04:05 with IP source address 10.11.30.5 to destination IP |
27 |
address 10.10.15.1 with broadcast destination hardware address. |
28 |
In other words, who-has the mac address of 10.10.15.1, tell 10.11.30.5 |
29 |
- assuming 00:01:02:03:04:05 is the source mac address of our 'ne0' device. |
30 |
|
20 |
|
31 |
WWW: http://www.packetfactory.net/projects/nemesis/ |
21 |
WWW: http://www.packetfactory.net/projects/nemesis/ |