| |
| | Custom Attack Simulation Language (Site not responding. Last check: 2007-10-13) |
 | | A complete programming language, with most typical high-level language control constructs (e.g., "if", "while", and "for" statements), and designed to be as easy to learn and use as shell-script languages, but with network programming functionality rivalling that of "C" code. |
 | | It can be used to quickly construct simulations for protocol-spoofing attacks (like the infamous "land" and "teardrop" bugs), to easily build information-gathering tools like "stealth" port-scanners, or even to construct working "sniffer" programs to grab Unix "login" passwords or NT authentication hashes. |
 | | Alternatively, you can continue reading to see how the CASL language works, and find out how CASL can be used to perform anything from a "teardrop" or "land" attack to TCP hijacking. |
| www.sockpuppet.org /tqbf/casl.html (546 words) |
|