SckTool was designed to allow you to easily send text and
binary data to a server for testing/debugging purposes.
Several features it includes are:
- Multiple clipboards
The current contents of the send buffer data window can be swapped
down to 2 other text pads for quickly cycling between payloads. This
feature is implemented as the 1 and 2 buttons next to the port textbox.
- Data buffer expansion
The send buffer supports the use of the [DATA] tag which can be used
to expand out the sent data buffer with a predefined length of bytes.
This buffer transformation can take place either OnSend, with the
check box option, or immediately in the textbox by the use of the now
button. This feature is included so you can easily add an exact number
of known bytes.
- Binary data sending
The send buffer textbox supports %xx hex character encoding to send
non-printable characters. The % escape character can be specified
by the user in case they want more readable output such as by using the
_ or . characters.
- Data File sending
Instead of sending a databuffer, analysts can send binary files. Simply
drag and drop the file into the send file textbox and click the Load file
button to load it into memory. You can optionally also reset the send buffer
size to a specific value in case data packets must match a specific size.
- Tmp dir file listing
If exploring file upload features of backdoors, they will often create the
file uploads in %TEMP%. This file listbox can be manually refreshed to watch for
such file creation, and can display the filesize of selected files.
This application was first developed while analyzing MyDoom.A, B and C backdoors and
has proven useful throughout a series of other analysis.
|