Re: Program for automatic attack replay

[Andreas Östling <andreaso () it su se>]

On Thu, 6 Mar 2003, LordEidi wrote:

...
> I think such replays of sessions could quite well be used as teaching
> aids. Unfortunately I did not find any link or website to any ressource
> containing a program or script doing exactly what the site above does.
>
> Has anyone of you seen such scripts or has done this him/herselfs?
...

I once wrote a simple patch for Snort that does this (but way more
primitive), just for the fun of it.
It may not apply cleanly to recent versions of Snort though.

http://nitzer.dhs.org/snort-replay/

I'd still be interested in similar programs/scripts as well.

/Andreas

----------------------------------------------------------------------------

Are your vulnerability scans producing just another report?
Manage the entire remediation process with StillSecure VAM's
Vulnerability Repair Workflow.
Download a free 15-day trial:
http://www2.stillsecure.com/download/sf_vuln_list.html