by Min G. Kang
Platforms: UNIX
Categories: Evasion, Intrusion Detection
Version: v0.7.1
Mendax is a "TCP de-synchronizer" that injects overlapping segments in randomly generated order. It's not a router but a stand-alone TCP client program. It can inject a simple attack signature or lines typed in. Although using general socket functions to receive data from the target host, it can send TCP segments not via TCP/IP stack. It's sort of "Own-Hijack"?

Comments Mode:


Privacy Statement
Copyright 2010, SecurityFocus