• Comments (0)
• Report
• Tell a Friend
• Print
• Screenshots

IP Sniffer is a suite of IP Tools built around a packet sniffer.

The sniffer has basic features like filter, decode, replay, parse…

• The IP tools are :
· Bandwidth monitor. view
· Adapter statistics (IP & NDIS). view
· Wireless Stumbler.
· List and manage ARP entries, resolve IP to MAC, resolve MAC to IP, send a WAKEUP call. view
· List and manage routes, enable & disable host as a router. view
· List and manage open ports and attached processes. view view
· Edit network config.
· Hook winsock (winsock32.dll & ws2_32.dll).
· Spoof ARP (and do ARP cache poisoning), spoof TCP, spoof UDP, spoof ICMP, spoof DHCP Release.
· Change MAC address, discover remote mac addresses. view
· SNMP Get & Set, List interfaces, Switch port mapper, Media Attachment Unit table.
· WINS Query.
· DNS (advanced) Query, DNS Server, Local resolver.
· DHCP Server (with PXE support), DHCP Discover.
· Whois Query.
· SMTP client.
· TCP tools (TCP ping, TCP half scan, Time-Daytime client/server).
· UDP tools (MSSQL Ping, SNMP ping, SSDP scan, Syslog client/server, Time-Daytime client/server, server).
· ICMP tools.
· TCP/UDP bounce port.
· MS Networks :
Enum servers by type, Spoof net send, Shutdown remote windows, Display remote windows properties, Display remote netbios names, Enum Terminal Services processes and sessions, Enum remote print ports, Enum remote drivers, Enum remote AT jobs, Enum remote scheduled tasks.
· Password tools :
Edit protected storage (IE, Outlook Express, …) , Decrypt Dialup Passwords , Dump XP Credentials ( MSN, network shares, …) & decrypt passwords , Decode IE history, Reveal asterisks / hidden passwords, decode RDP, Decode MSAccess passwords, enum WEP keys.
· List and manage local & remote processes.
· Tiny firewall (using Windows API).
· Get internet IP.

What's New in IP Sniffer 1.98 :

· added : loadfromdb and savetodb will keep table history
· added : save cap file with same link type as loaded cap file
· added : find user / computer in ad browser
· added : lastlogontimestamp in ad browser
· added : update/add/delete db one item in bookmark
· added : add/delete/create group & user in ad browser
· added : winsock hook will display 127.0.0.1 traffic
· added : winsock hook can save datas to cap file
· added : more reports : devices, printers ports/drivers/monitors, local admins
· added : reports from a list of servers
· added : update line from vbs in bookmark window
· added : new unit = hashes
· added : SIO_RCVALL IOCTL option (to be tested against different nics)
· added : modified savetreeview to be able to reload via loadlistview
· added : remove column, search and replace in bookmark
· fixed : winsock hook (recv functions were nulling the buffer)
· added : snmphelper class
· modified : snmp scan / ping subnet / arp scan -> thread uses postmessage (more thread safe)
· added : xpath functions in bookmark window / load-save from-to xml http
· added : can choose returned properties of ldap search query / dump query to xml / dump children to xml
· modified : md5 hash used to cipher. 3des encryption added. hexa/text switch. vnc encrypt/decrypt (need 3des.dll)
· modified : uses clause cleanup with icarus