Packet -Fu with Ruby
summary
Builds a Ruby packet library called Packet Fu that actually forges, parses and injects Ethernet/IP/TCP/UDP/ICMP/ARP/IPv6 packets using bin_data and pcaprub/libpcap, reads/writes pcap files and exposes packet objects with headers and payloads. Demonstrates ARP discovery and device fingerprinting, an IDS implemented in four lines, and a distributed TCP SYN scanner that probes a Class C in about 3 ms; requires root for injection, is at version 0.03 and is slated for the metas project integration.
AI-written summary · about
chapters (13)
- 0:00Start
- 1:25Why forge packets?
- 4:07Why Ruby?
- 5:06Wheel 2.0?
- 8:22Binary Structs: BinData
- 21:43Utility functions
- 25:43Mnemonic functions
- 26:16Packet Dissection
- 26:54Packet Flavors
- 30:07Scapy on Decoding
- 31:09Decoding options
- 32:45Packet Injection
- 34:23PacketFu Shell
related talks
30mBuilding a binary protocol client in Ruby: A magical journey!
32mSerial Protocol Analyzer on Ruby
55mSploitin' with Ruby (Point, Click, Root)
41mPeer-Aware Desktop Application Development
36mWorking with binary data in Ruby
21mHow to hijack, proxy and smuggle sockets with Rack/Ruby
44mOutside the Web Box: Using Ruby for Other Protocols
38mFun with Ruby and Arduino