THC-RUT (aRe yoU There) is a local network discovery tool developed to brute force its way into wavelan access points. It offers arp-request on ip-ranges and identifies the vendor of the NIC. In addition, the tool can spoof DHCP, BOOTP and RARP requests, icmp-address mask request and router discovery techniques. This tool should be 'your first knife' on a foreign network.
THC-RUT is known to compile on:
- Linux 2.2.17 #19 SMP i686 unknown
- Linux 2.4.3 #3 i686 unknown
- SunOS 5.8 Generic_108528-05 sun4u sparc
- NetBSD 1.5 (GENERIC) #1: Sun Nov 19 21:42:11 MET 2000 GENERIC i386
- OpenBSD 2.8 GENERIC#399 i386
- FreeBSD 4.2-RELEASE #0: Mon Nov 20 13:02:55 GMT 2000 GENERIC i386
- HP-UX 11.00 A 9000/715 unknown
Examples:
ARP-request the local network (-m):
./thc-rut -s 192.168.66.66 -m 192.168.0.1-192.168.255.254
DHCP-request (-d, -D 0 for a list of other DHCP objects):
./thc-rut -d 255.255.255.255
DHCP-request with different source-mac-adresses and 50 packets/sec (-d):
./thc-rut -l 50 -d 00:00:02:00:00:01-00:00:02:00:ff:ff:255.255.255.255
ICMP-mask request (-a):
./thc-rut -s 192.168.66.66 -a 192.168.1.2
