Penetration Testing: Re: Tool to verify packet level responses

[brett () custom-tech net (Brett Campbell)]

Ryan wrote:
> I was wondering what other tools people use to perform the following:
> identifying TCP sequence predictability, TCP ISN sequence numbers
> predictability, IPID sequence generation predictability, and finally system
> up-time. I've been using nmap, but I'm curious as to what other people use
> for these tasks.
I'm not sure about TCP sequence predictability, but of course hping2 is
useful in looking at IPID, etc.  There is also the p0f tool -- a passive
OS detector that will glean information on uptime, network-type (be it
DSL, OC-3, etc), NAT/Firewall presence, and other things. 
-- 
[ Brett R. Campbell ]
 -> Configuration Management / Systems Administration
 -> Collaborative Agent Design Research Center
 -> California Polytechnic State University, SLO, CA
 http://www.cadrc.calpoly.edu/frameset_content/content_about_us.html

---------------------------------------------------------------------------
----------------------------------------------------------------------------