(i'm only subscribed to the digest, forgive me if i get out of sync...)
i'm always looking for new protocols to add to dsniff, my passive network
auditing tool. earlier this year, i cracked Citrix ICA Basic Encryption,
from traffic traces provided by a third party. i'd be happy to look at
other common protocols with an eye toward cracking them, especially if
they use unknown, proprietary ciphers (or even if it's just cleartext).
if you have traces of such traffic you'd like me to look at, please
contact me. it is often useful for security admins to have some tangible
proof that an insecure protocol should be disallowed on, thru, or into a
corporate network; i hope dsniff proves useful in this regard.
http://www.monkey.org/~dugsong/dsniff/
sample use:
http://www.citi.umich.edu/dsniff.html
-d.
---
http://www.monkey.org/~dugsong/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
