hping3
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples using
hping3with elevated privileges (sudo). These are standard for raw socket operations required by packet crafting tools. Specific commands include: - TCP SYN/ACK probes, UDP probes, and TCP-based traceroute.
- Port scanning techniques using shell loops and port incrementation (
-p ++80). - Firewall testing using spoofed source ports (
-s 53) and packet fragmentation (-f). - Script execution via
hping3 exec myscript.htcl, which uses hping3's embedded Tcl interpreter. - [SAFE]: The skill includes explicit security guidelines, warning users to only test authorized networks, explaining that crafted packets can trigger security alerts (IDS/IPS), and strictly advising against flood mode (
--flood) and source spoofing on public networks.
Audit Metadata