Martin Hauke
mnhauke
Involved Projects and Packages
Bit-Twist is a simple yet powerful libpcap-based Ethernet packet generator.
It is designed to complement tcpdump, which by itself has done a great job
at capturing network traffic.
With Bit-Twist, you can now regenerate your captured traffic onto a live
network!
Packets are generated from tcpdump trace file (.pcap file).
Bit-Twist also comes with a comprehensive trace file editor to allow you to
change the contents of a trace file.
Generally, packet generator is useful in simulating networking traffic or
scenario, testing firewall, IDS, and IPS, and troubleshooting various network
problems.
bmon is a portable bandwidth monitor and rate estimator. It supports various
input methods for different architectures. Various output modes exist,
including an interactive curses interface, lightweight HTML output, and simple
ASCII output. Statistics may be distributed over a network using multicast or
unicast and collected at some point to generate a summary of statistics for a
set of nodes.
A network testing tool for access and routing protocols. It can emulate
massive PPPoE and IPoE (DHCP) subscribers including IPTV, and L2TP (LNS).
There are various routing protocols supported like ISIS and BGP.
So you can use it for end-to-end BNG and non-BNG router testing.
You can use the included traffic generator for forwarding verification,
QoS testing or to measure convergence times. The traffic generator supports
millions of separate tracked flows. This allows you to verify every single
forwarding state of a full feed internet routing table. You can also send
traffic to every single QoS queue of your service edge router.
The following helper tools are also provided:
* bngblaster-cli
Python script to interact with the BNG Blaster control socket JSON RPC API.
* bgpupdate
Python script to generate BGP RAW update streams for use with
the BNG Blaster.
https://rtbrick.github.io/bngblaster/
A console based wireshark like protocol analyzer.
It is using libwireshark for the protocol dissection.
Dillo is a multi-platform graphical web browser known for its speed and small footprint.
Dillo is written in C and C++.
Dillo is based on FLTK, the Fast Light Toolkit (statically-linked by default!).
Dillo is free software made available under the terms of the GNU General Public License (GPLv3).
Dillo strives to be friendly both to users and developers.
Dillo helps web authors to comply with web standards by using the bug meter.
Ditto is a small tool that accepts a domain name as input and
generates all its variants for an homograph attack as output,
checking which ones are available and which are already
registered.
Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner.
It keeps SSH clients locked up for hours or even days at at time. The purpose
is to put your real SSH server on another port and then let the script kiddies
get stuck in this tarpit instead of bothering a real server.
Since the tarpit is in the banner before any cryptographic exchange occurs,this
program doesn't depend on any cryptographic libraries. It's a simple,
single-threaded, standalone C program. It uses poll() to trap multiple clients
at a time.
Forced browsing is an attack where the aim is to enumerate and access
resources that are not referenced by the web application, but are
still accessible by an attacker.
feroxbuster uses brute force combined with a wordlist to search for
unlinked content in target directories. These resources may store
sensitive information about web applications and operational systems,
such as source code, credentials, internal network addressing, etc...
This attack is also known as Predictable Resource Location, File
Enumeration, Directory Enumeration, and Resource Enumeration.
A tool to measure TCP/UDP transport layer throughput between hosts.
A commandline web screenshot and information gathering tool.
horst is a small, lightweight IEEE802.11 WLAN analyzer with a text interface.
Its basic function is similar to tcpdump, Wireshark or Kismet, but it's much
smaller and shows different, aggregated information which is not easily
available from other tools. It is made for debugging wireless LANs with a
focus on getting a quick overview instead of deep packet inspection and has
special features for Ad-hoc (IBSS) mode and mesh networks.
It can be useful to get a quick overview of what's going on on all wireless
LAN channels and to identify problems.
Also known as cURL and wget command Alternative.
The goal of HTTPie is to make CLI interaction with web services as human-friendly as possible.
Full-rich client for the Registry Data Access Protocol (RDAP)
sponsored by ICANN.
Transparently tunnel IP traffic through ICMP echo and reply packets.
ipv6gen features:
generates prefix list of certain length from given prefix
via one of the 3 methods described in RFC 3531
The SI6 Networks' IPv6 toolkit is a set of IPv6 security and
trouble-shooting tools, that can send arbitrary IPv6-based
packets.
List of tools:
* addr6: An IPv6 address analysis and manipulation tool.
* flow6: A tool to perform a security asseessment of the IPv6 Flow
Label.
* frag6: A tool to perform IPv6 fragmentation-based attacks and to
perform a security assessment of a number of fragmentation-related
aspects.
* icmp6: A tool to perform attacks based on ICMPv6 error messages.
* jumbo6: A tool to assess potential flaws in the handling of IPv6
Jumbograms.
* na6: A tool to send arbitrary Neighbor Advertisement messages.
* ni6: A tool to send arbitrary ICMPv6 Node Information messages,
and assess possible flaws in the processing of such packets.
* ns6: A tool to send arbitrary Neighbor Solicitation messages.
* ra6: A tool to send arbitrary Router Advertisement messages.
* rd6: A tool to send arbitrary ICMPv6 Redirect messages.
* rs6: A tool to send arbitrary Router Solicitation messages.
* scan6: An IPv6 address scanning tool.
* tcp6: A tool to send arbitrary TCP segments and perform a variety
of TCP-based attacks.
IRTT (Isochronous Round-Trip Tester) IRTT measures round-trip time,
one-way delay and other metrics using UDP packets sent on a fixed period,
and produces both user and machine parseable output.
This implementation provides LLDP sending and reception, supports VLAN
and includes an SNMP subagent that can interface to an SNMP agent
through AgentX protocol.
LLDP is an industry standard protocol designed to supplant proprietary
Link-Layer protocols such as Extreme EDP (Extreme Discovery Protocol)
and CDP (Cisco Discovery Protocol). The goal of LLDP is to provide an
inter-vendor compatible mechanism to deliver Link-Layer notifications
to adjacent network devices.
This daemon is also able to deal with CDP, FDP, SONMP and EDP
protocol. It also handles LLDP-MED extension.
mcjoin can be used to join IPv4 multicast groups, display
progress as multicast packets are received, and also send
multicast packets on select groups.
mcjoin can help verify intended IGMP snooping functionality
in layer-2 bridges/switches, as well as test forwarding of
multicast in static or dynamic multicast routing setups.
MGEN provides the ability to perform IP network performance tests
and measurements using TCP and UDP/IP traffic. Test messages
can be generated, received and logged. MGEN offers control over
all network parameters and timing of these messages. All this can be
done either via the command line or defined in a file format for
greater reproducibility.
msoak is a utility to simultaneously subscribe to an arbitrary
number of topics on any number of MQTT brokers and optionally
modify or normalize received payloads before printing them out.
This utility was created for being able to back up to a central
location messages received by a number of brokers; instead of
launching (and having to monitor success of) a large number of
mosquitto_sub(1) programs, msoak took on the job.
msoak uses asynchronous connects to the MQTT brokers so that it
can handle situations in which a broker may temporarily be
unavailable.