Projects
A place where we will put random code.
http://code.google.com/p/alienvault-labs-garage/
Currently in progress in the Garage:
- Clearcutter – a tool for processing unfamiliar log files and samples
- Identify specific log messages present in a file
- Identify sequences of log entries that describe an activity thread’
- Test OSSIM plugins against log samples and produce validated Regexes
- Profile regexes for performance against each other and real logs
jaime.blasco
At AlienVault Jaime manages the Lab and runs the Vulnerability Research Team. Prior to working in the AlienVault lab he founded a couple of startups (Eazel, Aitsec) working on web application security, source code analysis and incident response. His background stems from a number of years working in vulnerability management, malware analysis and security researching.
Follow Me:
https://code.google.com/p/wireless-intrusion-detection-system-testing-tool/
The script generates wireless packets to emulate wireless attacks with the intention of testing wireless intrusion detection systems.
At this moment it supports the following attacks:
- Send Probe-response packets with a SSID IE tag component of length 0 (WVE-2006-0064)
- Floods the WLAN with disassociation packets. (WVE-2005-0046)
- Floods the WLAN with deauthentication packets. (WVE-2005-0045)
- Floods the WLAN with deauthentication packets. (WVE-2005-0045)
- Sends invalid deauthentication reason code
- Sends an over-sized SSID. (WVE-2006-0071, WVE-2007-0001)
- Sends airjack beacon packet. (WVE-2005-0018)
- Sends an an invalid channel number in beacon frames (WVE-2006-0050)
- Windows XP SP1 behaviour
To run the tool you need Scapy.
jaime.blasco
At AlienVault Jaime manages the Lab and runs the Vulnerability Research Team. Prior to working in the AlienVault lab he founded a couple of startups (Eazel, Aitsec) working on web application security, source code analysis and incident response. His background stems from a number of years working in vulnerability management, malware analysis and security researching.
Follow Me:
