Hi Michel,
the forge_{ip,tcp,udp}_packet functions are not what I'm looking for...
they don't provide an interface to modify smb headers, negociate SMB MailSlot
protocol and manage smb transactions...
It will be very nice to have those function on openvas.
thanks.
3. Re: SMB packet forgery (Michael Wiegand)
Message: 3
Date: Fri, 26 Sep 2008 11:36:57 +0200
From: Michael Wiegand <[EMAIL PROTECTED]>
Subject: Re: [Openvas-plugins] SMB packet forgery
To: [email protected]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
[Friday 26 September 2008 - 11:24:09] "Jan-Oliver Wagner"
<[EMAIL PROTECTED]>:
> > they are smb related vulnerabilties, but now I want to set some values in
> > the packet! I've seen It works very well with?impacket from Core
> > Security, using these python modules: dcerpc,uuid,transport
> >
> > does?openvas libraries provides an alternate method to do that ?
>
> at a quick glance I did not find any such methods inside openvas-libraries
> or openvas-libnasl.
>
> I am currently not deep into the packet stuff. Hopefully someone else can
> answer here. However, it sound like a good idea to provide a API for
> further analysis of SMB packets.
I am not that deep into NASL either, but the forge_{ip,tcp,udp}_packet
functions might be what you are looking for.
Please refer to the documentation provided and existing NASL scripts for
details.
> > if not did you consider?impacket integration into openvas ? it's under
> > apache like license...
>
> If such methods do indeed make sense, it is probably best to directly
> integrate them into -libraries and -libnasl. It might be an option to
> implement in NASL directly, but I can not judge out of the box here.
IMHO it would make more sense to extend the functionality already provided by
NASL if necessary rather then duplicate existing functionality with an
outside module.
Regards,
Michael
--
Michael Wiegand OpenPGP key: D7D049EC
Intevation GmbH, Osnabr?ck http://www.intevation.de/
Amtsgericht Osnabr?ck, HR B 18998
Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
------------------------------
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
End of Openvas-plugins Digest, Vol 10, Issue 21
***********************************************
__________________________________________________
Do You Yahoo!?
Poco spazio e tanto spam? Yahoo! Mail ti protegge dallo spam e ti da tanto
spazio gratuito per i tuoi file e i messaggi
http://mail.yahoo.it
_______________________________________________
Openvas-plugins mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
