Application Security Assessment Methodology

http://www.bgdsoftware.com/security/security_assessment.htm
http://www.counterpane.com/application-security-assessment.html

hping, the packet crafter

tcpdump, the packet analyzer

-n	Don’t resolve hostnames
-nn	Don’t resolve hostnames @ port names
-X	Show the packet’s content in both hex & ASCII
-v, -vv, -vvv	Increase the amount of packet information you get back
-c	Only get x number of packets and then stop
-S	Print absolute sequence numbers
-e	Get the Ethernet header as well

tcpdump –nS	Basic communication
tcpdump -nnvvS	Basic communication (very verbose)
tcpdump -nnvvSX	A deeper look at the traffic
tcpdump -nnvvSXs	Heavy packet viewing

http://dmiessler.com/study/tcpdump/

TCP Header

http://www.wtcs.org/snmp4tpc/literature.htm

VMWare Images


ISO Images

auditor-150405-04.iso
backtrack-v.1.0-260506.iso
ipcop-install-1.4.10.i386.iso
knoppix-std-0.1.iso
ubuntu-6.10-server-i386.iso

Installing an SSH Server on Windows

mkpasswd -l [-u ] >> ..\etc\passwd

http://www.netadmintools.com/art516.html

hping vs tcpdump (Packet Crafter vs Packet Analyzer / Sniffer)

prerequisite - you have to know the tcp ip layer, protocol & 3 way handshake