|
|
| (6 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) |
| Zeile 1: |
Zeile 1: |
| =Install=
| | *[[Was ist Hping3]] |
| *apt-get install hping3 | | *[[Hping3 anwenden]] |
| =PING auf port 0=
| | *[[DOS mit hping3]] |
| *hping3 10.0.10.104 | | *[[ICMP-Timestamp-Anfrage mit hping]] |
| | |
| =SYN Ping=
| |
| *hping3 10.0.10.104 -S -p 80 -w 2000 -d 1500 --fast
| |
| SYN tcp flag: -S
| |
| Port 80: -p 80
| |
| TCP Window: -w 2000
| |
| Data Size: -d 1500
| |
| 10Packets/s: --fast
| |
| | |
| =SYN PUSH Ping=
| |
| *hping3 10.0.10.104 -S -P -p 80 | |
| Push Flag: -P
| |
| | |
| =ACK Ping=
| |
| *hping3 10.0.10.104 -A -p 80 | |
| ACK Flag: -A
| |
| =Scan=
| |
| *hping3 -8 1-1000 -S 10.0.10.104
| |
| <pre>
| |
| Scanning 192.168.1.1 (192.168.1.1), port 1-1000
| |
| 1000 ports to scan, use -V to see all the replies
| |
| +----+-----------+---------+---+-----+-----+-----+
| |
| |port| serv name | flags |ttl| id | win | len |
| |
| +----+-----------+---------+---+-----+-----+-----+
| |
| 21 ftp : .S..A... 64 0 29200 44
| |
| 22 ssh : .S..A... 64 0 29200 44
| |
| 80 http : .S..A... 64 0 29200 44
| |
| 139 netbios-ssn: .S..A... 64 0 29200 44
| |
| 389 ldap : .S..A... 64 0 29200 44
| |
| 443 https : .S..A... 64 0 29200 44
| |
| 445 microsoft-d: .S..A... 64 0 29200 44
| |
| 636 ldaps : .S..A... 64 0 29200 44
| |
| All replies received. Done.
| |
| Not responding ports:
| |
| </pre>
| |
| | |
| =SYN Flooding gespoofte IP=
| |
| *hping3 -a 10.0.10.104 -S 10.85.4.1 -p 631 --flood
| |
| Spoof IP: -a
| |
| | |
| =timestamp=
| |
| *hping3 -1 dumm-host --icmp-ts -c 1
| |
| <pre>
| |
| HPING dumm-host (eth0 192.168.244.156): icmp mode set, 28 headers + 0 data bytes
| |
| len=40 ip=192.168.244.156 ttl=64 id=15600 icmp_seq=0 rtt=7.9 ms
| |
| ICMP timestamp: Originate=62740839 Receive=62740835 Transmit=62740835
| |
| ICMP timestamp RTT tsrtt=8 | |
| | |
| | |
| --- dumm-host hping statistic ---
| |
| 1 packets transmitted, 1 packets received, 0% packet loss
| |
| round-trip min/avg/max = 7.9/7.9/7.9 ms
| |
| </pre>
| |
| | |
| =Port 50 aufsteigend=
| |
| *hping3 -S -p ++50 dumm-host
| |
| =Hacks=
| |
| *[[Packet Injection]]
| |