The Ethical Hacker Network

Latest Additions

Who's Online

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4165

Editor-In-Chief

hping

« on: July 30, 2006, 09:55:40 PM »

This handy tool commonly known as ping on steroids is very useful for both the pen tester and the network admin. Currently available version is hping2, but hping3 is currently under development. Here are the details from their web site:

Quote

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping( 8 ) unix command, but hping isn't only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

While hping was mainly used as a security tool in the past, it can be used in many ways by people that don't care about security to test networks and hosts. A subset of the stuff you can do using hping:

Firewall testing
Advanced port scanning
Network testing, using different protocols, TOS, fragmentation
Manual path MTU discovery
Advanced traceroute, under all the supported protocols
Remote OS fingerprinting
Remote uptime guessing
TCP/IP stacks auditing
hping can also be useful to students that are learning TCP/IP

Hping should work without problems on the following unix-like systems:
Linux, FreeBSD, NetBSD, OpenBSD, Solaris, MacOs X

For more info:
http://www.hping.org/

Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

LSOChris

Guest

Re: hping

« Reply #1 on: July 30, 2006, 10:10:08 PM »

ahh good ol hping2 and hping3

the TCL language with hping 3 makes it a powerful tool, but i dont find the ease of use with hping3 that hping2 had. plus a complete lack of documenation doesnt help either.

luckily with hping3 you can use all the old hping2 command so its still all good. there are other packet crafting tools that are arguably better out there like scapy.


	Logged

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4165

Editor-In-Chief

Re: hping

« Reply #2 on: July 30, 2006, 10:17:16 PM »

I understand your desire for documentation, but let's give the guys a little break. hping3 is still in alpha phase.

Don


	Logged

CISSP, MCSE, CSTA, Security+ SME

LSOChris

Guest

Re: hping

« Reply #3 on: July 30, 2006, 10:42:47 PM »

its been in alpha phase for over a year...

but hey its a better tool than i have written so no griping :-)

another option is to write your own documentation, which i started on...but i'll leave that for another post :-)


	Logged

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4165

Editor-In-Chief

Re: hping

« Reply #4 on: July 30, 2006, 10:55:39 PM »

True. Timing on releases in the open source world is never a science. But at least you get 'more' than you pay for.

For those following this post, here's a link to the Scapy topic in this forum:
http://www.ethicalhacker.net/component/option,com_smf/Itemid,49/topic,535.0/

Don