We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Protocols Are Everywhere: RE with Netzob

Formal Metadata

Title
Protocols Are Everywhere: RE with Netzob
Title of Series
Number of Parts
90
Author
License
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date2014
LanguageEnglish

Content Metadata

Subject Area
Genre
Abstract
Latest updates on a semi-automatic protocol reverser Netzob is an opensource tool for reverse engineering, traffic generation and fuzzing of communication protocols. In 15 minutes, we'll present the latest improvements in this tool which allows to infer the message format (vocabulary) and the state machine (grammar) of a Network, USB, Files, API, IPC, (...) protocol. A short demo will be presented. This short talk will provide some key assets in the field of protocol reverse engineering and details on the latest features. Netzob is suitable for reversing network protocols, structured files, process flows (IPC and communication with drivers and devices) and hardware flows (USB, ...). Dedicated modules are provided to capture and import data in multiple contexts (network, file and process data acquisition). Once inferred, a protocol model can afterward be exported to third party tools (Peach, Scapy, Wireshark, etc.) or used in the traffic generation engine, to allow simulation of realistic and controllable communication endpoints and flows. Netzob handles different types of protocols: text protocols (like HTTP and IRC), delimiter-based protocols, fixed fields protocols (like IP and TCP) and variable-length fields protocols (like TLV-based protocols). Join the devel team and participate in the creation of a unique tool.