Oct 01, 2009

How to Create Custom Strikes Part III: Generating the Strike

by Mike Hamilton

In Part I of our look at how-to create custom strikes for testing we talked about finding and validating a vulnerability, and Part II took a look at how we went about creating the custom strike. Now we can look at the step-by-step directions for generating this custom strike using the BreakingPoint Elite.

To download the entire how-to guide, which includes all three parts, simply head over to our how-to guides section.

How to Generate a Custom Strike in BreakingPoint Elite

Step 1: Create a new Super Flow with the Custom Application flow.

Step 2: Add the Process Dblock XML action to the flow.

Step 3: Import XML Description File.

Step 4: Select XML file from local directory structure.

Step 5: Ensure the XML file is selected and click Apply.

Step 6: Open Attack Manager as illustrated and create a new Attack Series.

Step 7: Click the + button to add a strike to the default strike group.

Step 8: For the SELF.AppSimSuperFlow parameter, select the newly created Super Flow.

Step 9: Create a new test and add a security component to the test.

Step 10: In the Parameters tab, select the newly created Attack Series.

Step 11: Click Save to execute the test.

Results

Figure 12 illustrates the ASCII output generated from the Custom Strike Toolkit with the XML illustrated in the previous example.

Conclusion

We can now see how-to create customized security traffic utilizing the Custom Strike Toolkit for the BreakingPoint Elite. The step-by-step process listed in the how-to guide will allow even a novice user to quickly develop customized security strikes using this API. While the example illustrated in this document is rather straightforward, users can create security exploits that are as elaborate as necessary.

To download the how-to guide, which includes all three parts, simply head over to our resources section.

blog comments powered by Disqus