SOCK_RAW

A collection of various papers and guides.

Papers

SOCK_RAW Demystified

SOCK_RAW Demystified is a paper I wrote about explaining the implementation of the raw sockets mechanism in the kernels of FreeBSD 7.0 and Linux 2.6. It delves into network internals showing the details of this powerful socket type and how it works behind the scene.

paper

Locating Stateless Firewalls

Locating Stateless Firewalls focuses on methods to discern between stateful and stateless firewalls. It discusses about how stateless firewalls can be further exploited due to possible misconfigurations and the result of RFC ambiguites.

paper  

Coding a Syn Scanner

Coding a Syn Scanner is a paper which explores the craft of making a custom port scanner that takes advantage of half-open connections. It explains in detail all the process required to code such a tool from scratch. It uses the codebase of Creeper - the simple syn scanner, which was actually written in parallel to this guide.

paper   creeper.c.html

Hacking Bash History

Hacking Bash History discusses about why the history mechanism of bash cannot be used as a monitoring/logging facility even with the strictest measures applied to secure it. A section of the text is dedicated to hacking the bash source code to interface it with syslog.

paper