Questions about this topic? Sign up to ask in the talk tab.
Difference between revisions of "Talk:Network"
From NetSec
| (3 intermediate revisions by one other user not shown) | |||
| Line 13: | Line 13: | ||
* [[packet flag]] - different flags that are available (syn/ack/fin/urg/etc) | * [[packet flag]] - different flags that are available (syn/ack/fin/urg/etc) | ||
* [[IP address]] - definition | * [[IP address]] - definition | ||
| − | * [[MAC address]] - definition, explain [[OUI]] | + | * [[MAC address]] - redirect to [[MAC]], update with definition, explain [[OUI]] |
* [[protocol header]] - may be unique to tcp/igmp/udp/etc, definition | * [[protocol header]] - may be unique to tcp/igmp/udp/etc, definition | ||
* [[subnet]] - definition | * [[subnet]] - definition | ||
| Line 31: | Line 31: | ||
'''Utilities/Admin:''' | '''Utilities/Admin:''' | ||
| − | :''Mostly how-tos for quick usage, some quick strings/examples'' | + | :''Mostly how-tos for quick usage, some quick strings/examples in different os's'' |
* [[netstat]] | * [[netstat]] | ||
* [[netcat]] with telnet redirect | * [[netcat]] with telnet redirect | ||
* [[nmap]] | * [[nmap]] | ||
* [[ping]] | * [[ping]] | ||
| + | * [[arping]] | ||
* [[mtr]] | * [[mtr]] | ||
* [[traceroute]] - merge with [[TCP traceroute]] | * [[traceroute]] - merge with [[TCP traceroute]] | ||
| Line 64: | Line 65: | ||
* [[sniffing]] - definition | * [[sniffing]] - definition | ||
* [[spoofing]] - definition | * [[spoofing]] - definition | ||
| − | * [[man in the middle]] - definition | + | * [[man in the middle]] - definition / redirect to http://www.blackhatlibrary.net/MITM_attack |
| − | * [[ICMP redirect]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] | + | * [[ICMP redirect]] - not just denial of service update & definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] |
* [[ARP poisoning]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] | * [[ARP poisoning]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] | ||
* [[DHCP spoofing]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] | * [[DHCP spoofing]] - definition, plus example with [[nemesis]] & [[tcpdump]] or [[scapy]]/[[ettercap]] | ||
Latest revision as of 19:42, 7 August 2012
We need to update or add the following pages:
- PLEASE READ THE ENTIRE LIST BEFORE EDITING ANYTHING.
Explanation/Background:
- If packet diagram, make example packet for diagram to explain.
- packet - definition
- ethernet frame - definition, diagram
- packet header - definition
- IP header - diagram of IP header, show what part of packet etc
- packet flag - different flags that are available (syn/ack/fin/urg/etc)
- IP address - definition
- MAC address - redirect to MAC, update with definition, explain OUI
- protocol header - may be unique to tcp/igmp/udp/etc, definition
- subnet - definition
- multicast - definition
- ICMP - definition + packet diagram
- IGMP - definition + packet diagram
- UDP - definition + packet diagram
- OSPF - definition + packet diagram[s]
- CDP - definition + packet diagram[s]
- RIP - definition + packet diagram[s]
- SNMP - definition + packet diagram
- TCP - definition + packet diagram
- BGP - definition + packet diagram
- ARP - definition + packet diagram
- DHCP - definition + packet diagram
- DNS - definition + packet diagram
Utilities/Admin:
- Mostly how-tos for quick usage, some quick strings/examples in different os's
- netstat
- netcat with telnet redirect
- nmap
- ping
- arping
- mtr
- traceroute - merge with TCP traceroute
- hping
- nemesis
- tcpdump
- iptables - clean this up and fix a lot of things, provide more examples
- ettercap
- airsnort
- subnetting / routing - clean these up and maybe merge?
- kismet
- aircrack-ng suite
- iproute2
- ifconfig and ipconfig
- quagga / zebra
- dig
TCP Protocol explanations:
- Easy stuff, e.g. GET / HTTP 1.1
Network Exploitation
- sniffing - definition
- spoofing - definition
- man in the middle - definition / redirect to http://www.blackhatlibrary.net/MITM_attack
- ICMP redirect - not just denial of service update & definition, plus example with nemesis & tcpdump or scapy/ettercap
- ARP poisoning - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DHCP spoofing - definition, plus example with nemesis & tcpdump or scapy/ettercap
- IP hijack - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DNS poisoning - definition, plus example with nemesis & tcpdump or scapy/ettercap
- DNS cache poisoning
- NTLM downgrade attack
- RIP downgrade attack
- other stuff for wep/wpa/wps/other types of mitm & snooping
