OCTOBER 1, 2009

How to Create Custom Strikes Part III: Generating the Strike

In Part I of our look at how-to create custom strikes for testing we talked about finding and validating a vulnerability, and Part II took a look at how we went about creating the custom strike. Now we can look at the step-by-step directions for generating this custom strike using the BreakingPoint Elite.

To download the entire how-to guide, which includes all three parts, simply head over to our how-to guides section.

How to Generate a Custom Strike in BreakingPoint Elite

Step 1: Create a new Super Flow with the Custom Application flow.

custom application flow

Step 2: Add the Process Dblock XML action to the flow.

dblock xml

Step 3: Import XML Description File.

 XML description file

Step 4: Select XML file from local directory structure.

xml file

Step 5: Ensure the XML file is selected and click Apply.

xml file

Step 6: Open Attack Manager as illustrated and create a new Attack Series.

security testing

Step 7: Click the + button to add a strike to the default strike group.

security strike testing

Step 8: For the SELF.AppSimSuperFlow parameter, select the newly created Super Flow.

application simulation

Step 9: Create a new test and add a security component to the test.

performance security test

Step 10: In the Parameters tab, select the newly created Attack Series.

security attack simulation

Step 11: Click Save to execute the test.

network testing

Results

Figure 12 illustrates the ASCII output generated from the Custom Strike Toolkit with the XML illustrated in the previous example.

ascii output

Conclusion

We can now see how-to create customized security traffic utilizing the Custom Strike Toolkit for the BreakingPoint Elite. The step-by-step process listed in the how-to guide will allow even a novice user to quickly develop customized security strikes using this API. While the example illustrated in this document is rather straightforward, users can create security exploits that are as elaborate as necessary.

To download the how-to guide, which includes all three parts, simply head over to our resources section.

0 comments
Tags: Custom Applications and Attacks // DDoS Testing //
Post a Comment
  1. Leave this field empty

Required Field

Videos

More >


Interact







Google+
LinkedIn

YouTube

Newsletter


Subscribe to BreakingPoint Labs blog by email:

Type in your email, hit submit and quickly verify your address.