Hi all,

I have been looking for software / hardware that can accomplish
following tasks:

A. software/hardware that can be used for running brute force /
dictionary attack against network ports running on a system.
B. hardware that can be used for running low level tests against
network ports.

Both of these would be used for checking a system for possible
backdoors.

Alternative A should be able to test a network port pretty much the
same way as a brute force pen testing tool would do with a software
application. It should be able to send character snippets of varying
lengths to selected network port or ports and be able to react to a
response.

Alternative B should be able to test a network port for reactions to
low level signals and voltage differences.

Does anyone know if this type of hardware/software exists
commercially?

Also pointers to any information such as books about this would be
appreciated.

thanks

JJ

Additional clarification to my previous post:

Alternative A is related to the fact that a software listening on a
specific port could have a mechanism that opens a reverse shell if a
packet X with a value Y is fed to the port. What I am looking for is a
tool that can vary the values sent to the port and check for a
reaction.

Alternative B is related to the fact that the firmware on a NIC (or
its drivers, O/S network stack, a combination of these) could react to
small changes in the electric signal on the network. What I am looking
for here is a tool that can vary the electric signal and also monitor
the signal from the card (eg if a reverse shell is opened, the card
starts sending data and at this point there is fluctuation in the
voltage level).

jjoensuu wrote:
> Additional clarification to my previous post:
>
> Alternative A is related to the fact that a software listening on a
> specific port could have a mechanism that opens a reverse shell if a
> packet X with a value Y is fed to the port. What I am looking for is a
> tool that can vary the values sent to the port and check for a
> reaction.
>
> Alternative B is related to the fact that the firmware on a NIC (or
> its drivers, O/S network stack, a combination of these) could react to
> small changes in the electric signal on the network. What I am looking
> for here is a tool that can vary the electric signal and also monitor
> the signal from the card (eg if a reverse shell is opened, the card
> starts sending data and at this point there is fluctuation in the
> voltage level).
>

There are lots of network intrusion detection, password-checking
security programs. Google for them.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

On 15 Apr 2007 21:29:07 -0700, "jjoensuu" <j_joensuu@yahoo.com> wrote:

>Brute force backdoor checking

Proceed with caution here. Depending on the disposition of the
check-ee, it's possible that this could be considered rape. Remember,
""hurt me baby" means go, but "NO" means NO!

HTH. :-)

Snort (www.snort.org)

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"jjoensuu" <j_joensuu@yahoo.com> wrote in message
news:1176705106.271787.111740@n76g2000hsh.googlegr oups.com...
> Additional clarification to my previous post:
>
> Alternative A is related to the fact that a software listening on a
> specific port could have a mechanism that opens a reverse shell if a
> packet X with a value Y is fed to the port. What I am looking for is a
> tool that can vary the values sent to the port and check for a
> reaction.
>
> Alternative B is related to the fact that the firmware on a NIC (or
> its drivers, O/S network stack, a combination of these) could react to
> small changes in the electric signal on the network. What I am looking
> for here is a tool that can vary the electric signal and also monitor
> the signal from the card (eg if a reverse shell is opened, the card
> starts sending data and at this point there is fluctuation in the
> voltage level).
>