As I’m currently developing the ‘next gen’ state-full fuzzing framework @ERNW
[called dizzy, to be released soon 😉 ], I will give you an updated set of
fuzzing scripts from the ‘old world’.
Some of you will remember the 2008 release of sulley_l2, which was a modified
version of the sulley fuzzing framework, enhanced with Layer 2 sending
capabilities and a hole bunch of (L2) fuzzing scripts. All the blinking,
rebooting, mem-corrupting ciscos gave us some attention. Back from then, we
continued to write and use the fuzzing scripts, so the hole collection grew.
gtp_scan is a small python script that scans for GTP (GPRS tunneling protocol)
speaking hosts. To discover those hosts it uses the GTP build in PING mechanism,
it sends a GTP packet of the type ECHO_REQUEST and listens for an incoming GTP
ECHO_REPLY. Its capable of generating ECHO_REQUESTS for GTP version 1 and GTP
version 2. Also the script can scan for both, GTP-C and GTP-U (the control
channel and the user data channel), only the port differs here.
Everybody who is interested in our newest tool ‘Loki’ is welcomed to head over
to ERNW’s tool section and
download it. Take this monster for a spin and let us know in the comments how
you like it. Loki’s coding father Daniel is more than happy to answer your
questions and criticism.
You don’t even know what Loki is?
In short: An advanced security testing tool for layer 3 protocols.
