[buug] Evil Packet Sniffer

[f.johan.beisser]

On Fri, 18 Apr 2003, Aaron T Porter wrote:

> 	Here's a link to the sniffer I mentioned at last night's meeting.
> A very nasty program that's making its way into a number of the script
> kiddie rootkits floating about.

doesn't seem all that much different from any other sniffer. Man in the
Middle attacks are routine, and prone to detection once you involve
cryptography.

what i find amusing are the various attacks against specific protocols.

i'll run a test on my home LAN in the next couple of weeks. i'm curious
about the ssh key interception, aswell as the arp cache spoiling.

-------/ f. johan beisser /--------------------------------------+
  http://caustic.org/~jan                      jan at caustic.org
	"Champagne for my real friends, real pain for
	  my sham friends." -- Tom Waits