Introduction

Zarp is a network attack tool centered around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out. Sessions can be managed to quickly poison and sniff multiple systems at once, dumping sensitive information automatically or to the attacker directly. Various sniffers are included to automatically parse usernames and passwords from various protocols, as well as view HTTP traffic and more. DoS attacks are included to knock out various systems and applications. These tools open up the possibility for very complex attack scenarios on live networks quickly, cleanly, and quietly.

The long-term goal of zarp is to become the master command center of a network; to provide a modular, well-defined framework that provides a powerful overview and in-depth analysis of an entire network. This will come to light with the future inclusion of a web application front-end, which acts as the television screen, whereas the CLI interface will be the remote. This will provide network topology reports, host relationships, and more. zarp aims to be your window into the potential exploitability of a network and its hosts, not an exploitation platform itself; it is the manipulation of relationships and trust felt within local intranets. Look for Zeb, the web-app frontend to zarp, sometime in the future.

Installation

git clone git://github.com/hatRiot/zarp.git



pip install -r requirements.txt

You can then run:



sudo python zarp.py --update

Tool Overview

Broad categories are (see wiki for more information on these):

• Poisoners
• Denial of Service
• Sniffers
• Scanners
• Services
• Parameter
• Attacks

CLI Usage and Shortcuts

> help



  zarp options:

    help            - This menu

    opts            - Dump zarp current settings

    exit            - Exit immediately

    bg          - Put zarp to background

    set [key] [value]   - Set key to value



  zarp module options:

    [int] [value]       - Set option [int] to value [value]

    [int] o         - View options for setting

    run (r)         - Run the selected module

    info            - Display module information

Modules can be navigated to by nesting entries:

bryan@debdev:~/tools/zarp$ sudo ./zarp.py 

[!] Loaded 34 modules.

     ____   __   ____  ____

    (__  ) / _\ (  _ \(  _ '

     / _/ /    \ )   / ) __/

    (____)\_/\_/(__\_)(__)  [Version: 0.1.5]



    [1] Poisoners       [5] Parameter

    [2] DoS Attacks     [6] Services 

    [3] Sniffers        [7] Attacks  

    [4] Scanners        [8] Sessions 



0) Back

> 6 2

    +-----+----------------+----------------------------+------+----------+-

    |     | Option         | Value                      | Type | Required | 

    +-----+----------------+----------------------------+------+----------+-

    | [1] | Displayed MOTD | b4ll4stS3c FTP Server v1.4 | str  | False    | 

    +-----+----------------+----------------------------+------+----------+-

    | [2] | Listen port    | 21                         | int  | False    | 

    +-----+----------------+----------------------------+------+----------+-

0) Back

FTP Server > 

Copyright (C) 2012 – 2014 drone <drone AT ballastsecurity DOT com>

Source: https://github.com/hatRiot/