IpMorph

Overview

There is nowadays a wide range of TCP/IP stack identification tools that allow to easily recognize the operating system of foreseen targets. The object of IpMorph is to show that fingerprint concealment and spoofing are uniformly possible against different known fingerprinting tools. IpMorph is a counter-recognition software implemented as a user-mode TCP/IP stack, ensuring session monitoring and on the fly packets re-writing. The IpMorph software is distributed under the GPLv3 license. This independent project is based on our previous works, and mainly derives from a specific need in the “Hynesim“ network architecture simulation project (DGA-CELAR-SSI-AMI government contract, http ://www.hynesim.org).

Source code

The very first version (02/2009) : IpMorph-0.1.tar.gz (md5 2e2ecb53caa95c857657e0ca0f561a99)

Conferences & Publications

SSTIC 2009

• The talk made the 05 june 2009 in Rennes at SSTIC 2009 : “Slides” (PPS – 3.9 Mo – FR), “Slides” (PDF – 3.5 Mo – FR)
• The full paper SSTIC 2009 – FR : “full paper SSTIC09″ (PDF – 3.3 Mo – FR)
• The full paper SSTIC 2009 – EN : : “full paper SSTIC09″ (PDF – 5.2 Mo – EN)
• Some photos of the talk :