当前位置：网站首页>Introduction to Kali system use of hping3

Introduction to Kali system use of hping3

2022-07-17 23:36:00 【51CTO】

I'm learning WEB When it comes to safety technology , It is inevitable to use kali linux System ,（ Because I don't want to install a lot of tools on the host machine , So you must learn to use kali linux Tools in the system ）.

kali linux Introduction to the system ：

Kali Linux Is based on Debian Of Linux Distribution version , Designed for digital forensics operating system .

Kali Linux Many test software are pre installed .

kali linux Installation of the system

About kali linux Installation of the system , You can refer to the article ：

https://blog.51cto.com/apple0/5113548

Generally installed in virtual machine , This facilitates the migration of the system . Rarely installed on physical computers .

kali Introduction to the system -Hping3 Use _kali Tools

kali The home page of the website

Hping3 brief introduction ：

hping Is used on the command line TCP/IP Come on assemble / analysis Open source tools for data packages . It supports TCP,UDP,ICMP and RAW-IP agreement , With trace routing mode .

hping It's security audit 、 Standard tools for firewall testing .hping The advantage is the ability to customize various parts of the packet , Therefore, the user can flexibly detect the target machine in detail .

hping Usually tested web service , Can be used for stress testing , It can also be done DOS Test experiment .

kali Introduction to the system -Hping3 Use _kali Tools _02

hping3 Home page of the website

stay kali On the search hping3

kali Introduction to the system -Hping3 Use _kali Tools _03

Return to turn on

kali Introduction to the system -Hping3 Use _hping3 Use _04

As soon as the interface is opened hping3 -h command

Here's a summary hping3 Command to use

       
        usage : hping3 host [options]
       
  -h  --help       Display help 
       
  -v  --version    Display version 
       
  -c  --count      The number of packets sent 
       
  -i  --interval   The time between sending packets  (uX namely X millisecond   for example ： -i u1000)
       
      --fast       equivalent  -i u10000 ( Per second 10 A package )
       
      --faster     equivalent  -i u1000 ( Per second 1000 A package )
       
      --flood    Send packets as quickly as possible , Don't show replies .
       
  -n  --numeric    Digital output , Symbolic output host address .
       
  -q  --quiet      Quiet mode 
       
  -I  --interface  Network card interface  ( Default routing interface )
       
  -V  --verbose    Detailed mode 
       
  -D  --debug      Debugging information 
       
  -z  --bind       binding ctrl+z To ttl( The default is the destination port )
       
  -Z  --unbind     Unbind ctrl+z key 
       
      --beep       For each matching packet received, beep 
      
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.

ad locum , It uses --flood

       
        Mode selection 
       
  default mode     TCP   //  The default mode is  TCP
       
  -0  --rawip      RAWIP Pattern , original IP Pattern . In this mode HPING It's going to send data IP head . Naked IP The way . Use RAWSOCKET The way .
       
  -1  --icmp       ICMP Pattern , In this mode HPING Will send IGMP Response , You can use it. --ICMPTYPE --ICMPCODE Option to send other types / Mode ICMP message .
       
  -2  --udp        UDP  Pattern , By default ,HPING Will send UDP Message to the host 0 port , You can use it. --baseport --destport --keep Option specifies its mode .
       
  -8  --scan       SCAN mode. // Scanning mode   Specify the port corresponding to the scan .
       
                   Example: hping --scan 1-30,70-90 -S www.target.host    //  scanning 
       
  -9  --listen     listen mode  //  Monitor mode 
      
1.
2.
3.
4.
5.
6.
7.
8.

ad locum , The common one is --icmp 、--udp

       
       IP  Pattern 
       
  -a  --spoof      spoof source address  // Source address spoofing . forge IP test , The firewall won't record your true IP 了 , Of course, you can't receive the response package .
       
  --rand-dest      random destionation address mode. see the man. //  Random destination address mode . Detailed use  man  command 
       
  --rand-source    random source address mode. see the man.       //  Random source address mode . Detailed use  man  command 
       
  -t  --ttl        ttl ( Default  64)  // modify  ttl  value 
       
  -N  --id         id ( Default   Random )  // hping  Medium  ID  value , The default value is random 
       
  -W  --winid       Use win* id Byte order   // Use winid Pattern , For different operating systems .UNIX ,WINDIWS Of id Respond to different , This option allows you to ID Response and WINDOWS equally .
       
  -r  --rel         relative id Field ( Estimate host traffic )  // change ID Of , It can make ID Ever decreasing output , See HPING-HOWTO.
       
  -f  --frag        Split packets more frag.  (may pass weak acl)   // piecewise , You can test each other's or switch's fragment handling ability , default 16 byte .
       
  -x  --morefrag    Set up more segmentation marks     //  A lot of debris , Teardrop test .
       
  -y  --dontfrag    Set no segmentation flag     //  Send unrecoverable IP debris , This will let you know more about MTU PATH DISCOVERY.
       
  -g  --fragoff    set the fragment offset    //  Set the break offset .
       
  -m  --mtu         Set the virtual maximum transmission unit , implies --frag if packet size > mtu    //  Set up a virtual MTU value , When more than mtu The time of segmentation .
       
  -o  --tos        type of service (default 0x00), try --tos help          // tos Field , default 0x00, Do my best ？
       
  -G  --rroute     includes RECORD_ROUTE option and display the route buffer    //  Record IP route , Route buffer is displayed .
       
  --lsrr            Loose source routing and record routing         //  Loose source routing 
       
  --ssrr            Strictly source routing and record routing       //  Strict source routing 
       
  -H  --ipproto     Set up IP Agreement field , Only in RAW IP Use... In mode    // stay RAW IP Choose from the pattern IP agreement . Set up ip Protocol domain , Only in RAW ip Mode use .
      
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.

ad locum , The command we use is --rand-source

       
       UDP/TCP  Pattern 
       
  -s  --baseport   base source port             (default random)              //  Default random source port 
       
  -p  --destport   [+][+]<port> destination port(default 0) ctrl+z inc/dec    //  Default random source port 
       
  -k  --keep       keep still source port      //  Keep the source port 
       
  -w  --win        winsize (default 64)        // win Sliding window of .windows Send byte ( Default 64)
       
  -O  --tcpoff     set fake tcp data offset     (instead of tcphdrlen / 4)    //  Set forgery tcp Data offset ( replace tcp Address length divided by 4)
       
  -Q  --seqnum     shows only tcp sequence number        //  Show only tcp Serial number 
       
  -b  --badcksum   ( Try ) Send with error IP Checksum packet . Many systems will fix the problem of sending packets IP The checksum . So you get the wrong UDP/TCP The checksum .
       
  -M  --setseq      Set up TCP Serial number  
       
  -L  --setack      Set up TCP Of ack   ------------------------------------- ( No  TCP  Of  ACK  Sign a )
       
  -F  --fin        set FIN flag
       
  -S  --syn        set SYN flag
       
  -R  --rst        set RST flag
       
  -P  --push       set PUSH flag
       
  -A  --ack        set ACK flag   ------------------------------------- （ Set up  TCP  Of  ACK  sign   position ）
       
  -U  --urg        set URG flag      //  A lot of IP Setting of holding head .
       
  -X  --xmas       set X unused flag (0x40)
       
  -Y  --ymas       set Y unused flag (0x80)
       
  --tcpexitcode     Use last tcp-> th_flags As an exit code 
       
  --tcp-mss         Enable with the given value TCP MSS Options 
       
  --tcp-timestamp   Enable TCP Timestamp option to guess HZ/uptime
      
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.

ad locum , Our common command is --syn 、--ack Or in short -S、-A

Specify port as --destport perhaps -p

Common commands

We combine the above commands

1、UDP ：

       
       hping3 192.168.16.128 --udp -p 80 --flood --rand-source
      
1.

2、ICMP：

       
       hping3  --icmp  --flood --rand-source www.51cto.com
      
1.

3、SYN ：

       
       hping3  -S  --flood --rand-source www.51cto.com
      
1.

4、ACK ：

       
       hping3  -A -p 80 --flood --rand-source www.51cto.com
      
1.

kali Introduction to the system -Hping3 Use _kali Tools _05

Summary above . This tool can construct a large number of packets in a short time .

原网站

版权声明
本文为[51CTO]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/198/202207150909571254.html

当前位置：网站首页>Introduction to Kali system use of hping3

Introduction to Kali system use of hping3

kali linux Introduction to the system ：

kali linux Installation of the system

Hping3 brief introduction ：

Common commands

边栏推荐

猜你喜欢

随机推荐