CoAP Peach Pit User Guide. Peach Fuzzer, LLC. Version

Size: px

Start display at page:

Download "CoAP Peach Pit User Guide. Peach Fuzzer, LLC. Version"

Morris Hood
5 years ago
Views:

1 CoAP Peach Pit User Guide Peach Fuzzer, LLC Version

2 Copyright 2015 Peach Fuzzer, LLC. All rights reserved. This document may not be distributed or used for commercial purposes without the explicit consent of the copyright holders. Peach Fuzzer is a registered trademark of Peach Fuzzer, LLC. Peach Fuzzer contains Patent Pending technologies. While every precaution has been taken in the preparation of this book, the publisher and authors assume no responsibility for errors or omissions, or for damages resulting from the use of the information contained herein. Peach Fuzzer, LLC 1122 E Pike St Suite 1064 Seattle, WA

3 1. CoAP Peach Pit: Data Sheet Peach Pit: CoAP Target: Client, Server Supported Platforms: Windows, Linux, OS X Constrained Application Protocol (CoAP) is a networking transfer protocol for use with constrained nodes and networks. Designed to work with simple electronics having low overhead and multicast support, CoAP uses include Internet of Things devices and embedded devices Specifications Specification RFC7252 Title The Constrained Application Protocol (CoAP) 1.2. Use Cases Messages CoAP Protocol Observe Block-Wise Transfers Specification RFC7252 draft-ietf-core-observe-16 draft-ietf-core-block-17 2

4 2. Target Client Configuration This pit configuration enables Peach to fuzz a CoAP device, such as low-power switches and devices in the category of the "Internet of Things". In configuring this pit, the user might need to supply network-centric information for the test target or the local host that runs Peach, such as the following: Name of the network interface Machine address (MAC) of the communications channel IPv4 and/or IPv6 addresses of the communications channel The topic Retrieving Machine Information describes how to find these items in the Peach-supported operating systems Required Pit Configuration Changes Target IPv4 Address (TargetIPv4) IPv4 address of the target machine or device Optional Pit Configuration Changes Source Port (SourcePort) Number of the UDPv4 port that sends packets from the local machine running Peach. The default value is Timeout (Timeout) Duration, in milliseconds, to wait for incoming data. The default value is 5000 milliseconds and is typically acceptible. The value -1 extends the duration to infinity. If the timeout is exceeded, a fault occurs and the fuzzer will skip to the next test case. 3

5 3. Target Server Configuration This pit configuration enables Peach to fuzz a CoAP server. In configuring this pit, the user might need to supply network-centric information for the test target or the local host that runs Peach, such as the following: Name of the network interface Machine address (MAC) of the communications channel IPv4 and/or IPv6 addresses of the communications channel The topic Retrieving Machine Information describes how to find these items in the Peach-supported operating systems Required Pit Configuration Changes Target IPv4 Address (TargetIPv4) IPv4 address of the target machine Optional Pit Configuration Changes Target Port (TargetPort) Number of the UDPv4 port that receives packets on the target machine. The default value is Timeout (Timeout) Duration, in milliseconds, to wait for incoming data. The default value is 3000 milliseconds and is typically acceptible. The value -1 extends the duration to infinity. If the timeout is exceeded, a fault occurs. Wait Time (WaitTime) Duration, in seconds, to pause between each test case. The default value is 0.2 seconds. 4

6 4. Retrieving Machine Information Interface names, hardware addresses, and IP addresses are used when fuzzing network protocols. Windows, Linux, and OS X each have their idiosynchrasies in reporting machine configuration details. This appendix provides an example of retrieving the machine information Interface name, MAC address, and IP v4 and v6 addresses from each of the operating systems Windows In Windows, ipconfig runs from the command line interface. Using the all parameter, ipconfig /all, displays the pieces of information. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. 5

7 Figure 1. ipconfig //all command Interface Name The interface name is part of the main entry on the line not indented and immediately follows the word "adapter". The previous illustration identifies two interfaces "Local Area Conection 2" and "Ethernet". The Interface name does not include the asterisk (*). You need to remove the asterisk, if present, when specifying the interface name to Peach. MAC Address The MAC address, labeled the "Physical Address" by ipconfig, is the address of the hardware interface. The entry is just a few lines into the detail, as shown in the previous illustration. 6

8 IPv4 Address The IP v4 address is the value labeled "IPv4 Address". The previous illustration calls out the IP v4 Address of the Ethernet interface. IPv6 Address The IP v6 address is the value labeled "Link-local IPv6 Address". The previous illustration calls out the IP v6 Address of the Ethernet interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping -6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network) Linux In Linux, ifconfig provides all of the needed information. The main entries reported by ifconfig identify each addapter by name, type, and other attributes. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. 7

9 Figure 2. Linux ifconfig command Interface Name The interface name is in leftmost column. Additional details are provided on indented lines. The previous illustration calls out the "eth0" and "lo" interfaces. The MAC address The MAC address is labeled with "HWaddr", and is located on the first line of the interface entry. The previous illustration calls out the MAC address of the "eth0" interface. IPv4 Address The IP v4 address is labeled with "inet addr", and is located in one of the first detail lines. The previous illustration calls out the IP v4 address of the "eth0" interface. 8

IPv6 Address The IP v6 address is labeled with "inet6 addr", and is follows the IP v4 address in the listing detail. The previous illustration calls out the IP v6 address of the "eth0" interface.

10 IPv6 Address The IP v6 address is labeled with "inet6 addr", and is follows the IP v4 address in the listing detail. The previous illustration calls out the IP v6 address of the "eth0" interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network) OS X In OS X, ifconfig provides all of the needed information. The main entries reported by ifconfig identify each addapter by name, type, and other attributes. The following illustration calls out instances of the Interface name, MAC address, and IP addresses. Figure 3. OS X ifconfig command Interface Name The interface name is in leftmost column. Additional details are provided on indented lines. The previous illustration calls out the "en0" and "en1" interfaces. MAC Address The MAC address is labeled with "ether", and is located on the first line of the interface entry. The 9

11 previous illustration calls out the MAC address of the "en0" and "en1" interfaces. IPv4 Address The IP v4 address is labeled with "inet ", and is located further down in the interface details. The previous illustration calls out the IP v4 address of the "en1" interface. IPv6 Address The IP v6 address is labeled with "inet6 ", and is located further down in the interface details. The previous illustration calls out the IP v4 address of the "en1" interface. You can confirm the correctness of an IP v4 or IP v6 address by using ping or ping6 followed by the appropriate IP address. For IP v6, the value fe80 in the leftmost block of hex digits indicates a link local address (i.e. a local network). 10

LDAP Peach Pit User Guide. Peach Fuzzer, LLC. v3.7.50

LDAP Peach Pit User Guide. Peach Fuzzer, LLC. v3.7.50 LDAP Peach Pit User Guide Peach Fuzzer, LLC v3.7.50 Copyright 2015 Peach Fuzzer, LLC. All rights reserved. This document may not be distributed or used for commercial purposes without the explicit consent