|
|
|
Hping3-alpha-1 released. Check wiki.hping.org. hping3 is fully scriptable using the TCL language, and packets can be received and sent via a binary or string rappresentation describing the packets. In pratice this means that a few lines of code can perform things that usually take many lines of C code. Examples are automated security tests with pretty printed report generation, TCP/IP test suites, many kind of attacks, NAT-ting, prototypes of firewalls, implementation of routing protocols, and so on. Hping3 is command line compatible with hping2 (but supports more options), but the scripting core is NOT limited to the usual hping2 packet generation capabilities. On the contrary it is able to generate arbitrary TCP/IP packets, supporting all the IP and TCP options published. Scripts can generate and read packets, but there are also commands to read and manipulate interface lists, arp tables, routinging, and firewalling. Hping3 is not a packet generation extension for a scripting language, it is a scriptable security tool. Of course hping3 scripts can access all the features of the Tcl language, so for example your hping3 script performing a port scanner can save the result in a MySQL database, draw a graph with open ports, and many other things. The status of hping3 is quite good, on Linux it already runs non trivial scripts, now efforts are going towards the BSD port, and the access of routing, arp table, and firewalling in an OS-indipendent way from hping3 scripts. Remember that while hping3 is free software, scripts you write can be under any license, so it will be possible to build products based on hping3 (but you will need a special hping license to release non GPL scripts as stand-alone binaries linked to the hping core). |