计算机安全超级工具（五）——自定义数据包生成

hping

http://www.hping.org/
hping is a command-line oriented TCP/IP packet assembler/analyzer. The
interface is inspired to the ping(8) unix command, but hping isn't only
able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP
protocols, has a traceroute mode, the ability to send files between a
covered channel, and many other features.

scapy

http://www.secdev.org/projects/scapy/
Scapy is a powerful interactive packet manipulation program. It is able to forge
or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and
replies, and much more. It can easily handle most classical tasks like
scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace
hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, tethereal, p0f, etc.).
It also performs
very well at a lot of other specific tasks that most other tools can't handle,
like sending invalid frames, injecting your own 802.11 frames,
combining technics (VLAN hopping+ARP cache poisoning, VOIP decoding on
WEP encrypted channel, ...), etc. See the quick demo: an interactive session
.

Netfilter

Netfilter
is a framework
that provides hook
handling within the Linux kernel
for intercepting and manipulating network packets. Put more concretely,
Netfilter is invoked, for example, by the packet reception and send
routines from/to network interfaces. As the master Netfilter function
is called with a packet, Netfilter runs through the list of registered
hooks and calls the extensions in succession, which then handle packets
as they desire. The term Netfilter
is also used to refer to the Free Software
project[1]

that aims to provide firewalling tools for GNU/Linux
.