Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Talk:Network"
From NetSec
| (5 intermediate revisions by one other user not shown) | |||
| Line 1: | Line 1: | ||
We need to update or add the following pages: | We need to update or add the following pages: | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| + | :''PLEASE READ THE ENTIRE LIST BEFORE EDITING ANYTHING.'' | ||
| + | |||
| + | '''Explanation/Background''': | ||
| + | :''If packet diagram, make example packet for diagram to explain.'' | ||
| + | * [[packet]] - definition | ||
| + | * [[ethernet frame]] - definition, diagram | ||
| + | * [[packet header]] - definition | ||
| + | * [[IP header]] - diagram of IP header, show what part of packet etc | ||
| + | * [[packet flag]] - different flags that are available (syn/ack/fin/urg/etc) | ||
| + | * [[IP address]] - definition | ||
| + | * [[MAC address]] - redirect to [[MAC]], update with definition, explain [[OUI]] | ||
| + | * [[protocol header]] - may be unique to tcp/igmp/udp/etc, definition | ||
| + | * [[subnet]] - definition | ||
| + | * [[multicast]] - definition | ||
| + | * [[ICMP]] - definition + packet diagram | ||
| + | * [[IGMP]] - definition + packet diagram | ||
| + | * [[UDP]] - definition + packet diagram | ||
| + | * [[OSPF]] - definition + packet diagram[s] | ||
| + | * [[CDP]] - definition + packet diagram[s] | ||
| + | * [[RIP]] - definition + packet diagram[s] | ||
| + | * [[SNMP]] - definition + packet diagram | ||
| + | * [[TCP]] - definition + packet diagram | ||
| + | * [[BGP]] - definition + packet diagram | ||
| + | * [[ARP]] - definition + packet diagram | ||
| + | * [[DHCP]] - definition + packet diagram | ||
| + | * [[DNS]] - definition + packet diagram | ||
'''Utilities/Admin:''' | '''Utilities/Admin:''' | ||
| + | :''Mostly how-tos for quick usage, some quick strings/examples in different os's'' | ||
* [[netstat]] | * [[netstat]] | ||
* [[netcat]] with telnet redirect | * [[netcat]] with telnet redirect | ||
* [[nmap]] | * [[nmap]] | ||
* [[ping]] | * [[ping]] | ||
| + | * [[arping]] | ||
* [[mtr]] | * [[mtr]] | ||
* [[traceroute]] - merge with [[TCP traceroute]] | * [[traceroute]] - merge with [[TCP traceroute]] | ||
| Line 48: | Line 54: | ||
'''TCP Protocol explanations:''' | '''TCP Protocol explanations:''' | ||
| + | :''Easy stuff, e.g. GET / HTTP 1.1'' | ||
* [[SMTP]] | * [[SMTP]] | ||
* [[HTTP]] | * [[HTTP]] | ||
| Line 56: | Line 63: | ||
'''Network Exploitation''' | '''Network Exploitation''' | ||
| − | * [[sniffing]] | + | * [[sniffing]] - definition |
| − | * [[spoofing]] | + | * [[spoofing]] - definition |
| − | * [[man in the middle]] | + | * [[man in the middle]] - definition / redirect to http://www.blackhatlibrary.net/MITM_attack |
| − | * [[ICMP redirect]] | + | * [[ICMP redirect]] - not just denial of service update & definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
| − | * [[ARP poisoning]] | + | * [[ARP poisoning]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
| − | * [[DHCP spoofing]] | + | * [[DHCP spoofing]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
| − | * [[IP hijack]] | + | * [[IP hijack]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
| − | * [[DNS poisoning]] | + | * [[DNS poisoning]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
* [[DNS cache poisoning]] | * [[DNS cache poisoning]] | ||
* [[NTLM downgrade attack]] | * [[NTLM downgrade attack]] | ||
* [[RIP downgrade attack]] | * [[RIP downgrade attack]] | ||
* other stuff for wep/wpa/wps/other types of mitm & snooping | * other stuff for wep/wpa/wps/other types of mitm & snooping | ||
Latest revision as of 19:42, 7 August 2012
We need to update or add the following pages:
- PLEASE READ THE ENTIRE LIST BEFORE EDITING ANYTHING.
Explanation/Background:
- If packet diagram, make example packet for diagram to explain.
- packet - definition
- ethernet frame - definition, diagram
- packet header - definition
- IP header - diagram of IP header, show what part of packet etc
- packet flag - different flags that are available (syn/ack/fin/urg/etc)
- IP address - definition
- MAC address - redirect to MAC, update with definition, explain OUI
- protocol header - may be unique to tcp/igmp/udp/etc, definition
- subnet - definition
- multicast - definition
- ICMP - definition + packet diagram
- IGMP - definition + packet diagram
- UDP - definition + packet diagram
- OSPF - definition + packet diagram[s]
- CDP - definition + packet diagram[s]
- RIP - definition + packet diagram[s]
- SNMP - definition + packet diagram
- TCP - definition + packet diagram
- BGP - definition + packet diagram
- ARP - definition + packet diagram
- DHCP - definition + packet diagram
- DNS - definition + packet diagram
Utilities/Admin:
- Mostly how-tos for quick usage, some quick strings/examples in different os's
- netstat
- netcat with telnet redirect
- nmap
- ping
- arping
- mtr
- traceroute - merge with TCP traceroute
- hping
- nemesis
- tcpdump
- iptables - clean this up and fix a lot of things, provide more examples
- ettercap
- airsnort
- subnetting / routing - clean these up and maybe merge?
- kismet
- aircrack-ng suite
- iproute2
- ifconfig and ipconfig
- quagga / zebra
- dig
TCP Protocol explanations:
- Easy stuff, e.g. GET / HTTP 1.1
Network Exploitation
- sniffing - definition
- spoofing - definition
- man in the middle - definition / redirect to http://www.blackhatlibrary.net/MITM_attack
- ICMP redirect - not just denial of service update & definition, plus example with nemesis & tcpdump or scapy/ettercap
- ARP poisoning - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DHCP spoofing - definition, plus example with nemesis & tcpdump or scapy/ettercap
- IP hijack - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DNS poisoning - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DNS cache poisoning
- NTLM downgrade attack
- RIP downgrade attack
- other stuff for wep/wpa/wps/other types of mitm & snooping
