focus-ids December 2008 archive
Main Archive Page > Month Archives  > focus-ids archives
focus-ids: Re: Worm generating network attack traffic?

Re: Worm generating network attack traffic?

From: <Skyler.Bingham_at_nospam>
Date: Wed Dec 03 2008 - 21:06:25 GMT
To: focus-ids@securityfocus.com, listbounce@securityfocus.com


Nessus is useful for this as it has thousands of checks that will generate a ton of attack traffic. The attacks are categorized by type, so you can limit the generated traffic to specific types of attacks (Windows, FTP, DoS, etc.). Metasploit can be used for very targeted attacks (specific exploits) which can be tweaked with different evasion options which is useful for testing IDSes. Both of these tools can be run from Windows.

http://www.nessus.org/nessus/
http://metasploit.org/

Skyler Bingham
GIAC {GSEC, GCIH, GCIA, GCFA}, CEH
(602) 957-1650 x1139

listbounce@securityfocus.com wrote on 12/02/2008 11:13:11 PM: >
> Hi
> Does anyone know any tools which can be used to generate network attack
> traffic ? It is for the purpose of testing IDSs OR for collecting offline
> intrusion detection dataset like 1999 DARPA dataset. I have windows xp
> installed so i need a tool or worm tool to generate network traffic so
that
> i can collect by wireshark.
> waiting ur reply.
> Thanks>



Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more.