Hping3: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(8 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
=Install=
+
*[[Was ist Hping3]]
*apt-get install hping3
+
*[[Hping3 anwenden]]
=PING auf port 0=
+
*[[DOS mit hping3]]
*hping3 10.0.10.104
+
*[[ICMP-Timestamp-Anfrage mit hping]]
 
 
=SYN Ping=
 
*hping3 192.168.244.52 -S -p 80 -w 2000 -d 1500 --fast
 
SYN tcp flag: -S
 
Port 80: -p 80
 
TCP Window: -w 2000
 
Data Size: -d 1500
 
10Packets/s: --fast
 
 
 
=SYN PUSH Ping=
 
*hping3 192.168.244.52 -S -P -p 80
 
Push Flag: -P
 
 
 
=ACK Ping=
 
*hping3 192.168.244.52 -A -p 80
 
ACK Flag: -A
 
=Scan=
 
*hping3  -8 1-1000  -S 192.168.1.1
 
<pre>
 
Scanning 192.168.1.1 (192.168.1.1), port 1-1000
 
1000 ports to scan, use -V to see all the replies
 
+----+-----------+---------+---+-----+-----+-----+
 
|port| serv name |  flags  |ttl| id  | win | len |
 
+----+-----------+---------+---+-----+-----+-----+
 
  21 ftp        : .S..A...  64    0 29200    44
 
  22 ssh        : .S..A...  64    0 29200    44
 
  80 http      : .S..A...  64    0 29200    44
 
  139 netbios-ssn: .S..A...  64    0 29200    44
 
  389 ldap      : .S..A...  64    0 29200    44
 
  443 https      : .S..A...  64    0 29200    44
 
  445 microsoft-d: .S..A...  64    0 29200    44
 
  636 ldaps      : .S..A...  64    0 29200    44
 
All replies received. Done.
 
Not responding ports:
 
</pre>
 
 
 
=SYN Flooding gespoofte IP=
 
*hping3  -a 10.0.10.104 -S 10.85.4.1  -p 631  --flood
 
Spoof IP: -a
 
 
 
=timestamp=
 
*hping3 -1 dumm-host --icmp-ts -c 1
 
<pre>
 
HPING dumm-host (eth0 192.168.244.156): icmp mode set, 28 headers + 0 data bytes
 
len=40 ip=192.168.244.156 ttl=64 id=15600 icmp_seq=0 rtt=7.9 ms
 
ICMP timestamp: Originate=62740839 Receive=62740835 Transmit=62740835
 
ICMP timestamp RTT tsrtt=8
 
 
 
 
 
--- dumm-host hping statistic ---
 
1 packets transmitted, 1 packets received, 0% packet loss
 
round-trip min/avg/max = 7.9/7.9/7.9 ms
 
</pre>
 
 
 
=Port 50 aufsteigend=
 
*hping3 -S -p ++50  dumm-host
 
=Hacks=
 
*[[Packet Injection]]
 

Aktuelle Version vom 25. Juli 2024, 06:53 Uhr