mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-11 13:44:56 +03:00
27c6414ca5
Complete skill folder anatomy across all cybersecurity skills: - scripts/agent.py: 80-150 line Python agents using real libraries (impacket, boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.) - references/api-reference.md: real API documentation with method signatures - LICENSE: MIT license for all skill folders
1.6 KiB
1.6 KiB
API Reference: Packet Injection Attack
Scapy Python API
from scapy.all import IP, TCP, UDP, ICMP, Raw, sr1, send
# Craft and send TCP SYN
pkt = IP(dst="10.10.20.10") / TCP(dport=80, flags="S")
resp = sr1(pkt, timeout=2, verbose=0)
# Send without waiting for response
send(pkt, verbose=0)
# Fragment a packet
from scapy.all import fragment
frags = fragment(IP(dst="10.10.20.10") / ICMP() / Raw(load="X"*65500))
send(frags, verbose=0)
Scapy Packet Layers
| Layer | Fields | Example |
|---|---|---|
IP |
src, dst, ttl, flags, frag | IP(dst="10.0.0.1", ttl=64) |
TCP |
sport, dport, flags, seq, ack | TCP(dport=80, flags="S") |
UDP |
sport, dport | UDP(dport=53) |
ICMP |
type, code | ICMP(type=8) |
DNS |
qd, rd | DNS(rd=1, qd=DNSQR(qname="test.com")) |
TCP Flag Values
| Flag | Value | Description |
|---|---|---|
| S | SYN | Connection initiation |
| A | ACK | Acknowledgment |
| F | FIN | Connection termination |
| R | RST | Connection reset |
| P | PSH | Push data |
| U | URG | Urgent pointer |
hping3 CLI
| Command | Description |
|---|---|
hping3 -S -p 80 <target> |
Send SYN packets |
hping3 -S --flood -c 100 <target> |
Limited SYN flood test |
hping3 -S -p 80 -w 0 <target> |
Zero window test |
Python Libraries
| Library | Version | Purpose |
|---|---|---|
scapy |
>=2.5 | Packet crafting, sending, and receiving |
References
- Scapy documentation: https://scapy.readthedocs.io/
- hping3: http://www.hping.org/
- Nping (Nmap): https://nmap.org/nping/
- tcpreplay: https://tcpreplay.appneta.com/