Collaborate Disseminate
I have a question for my security class related to the TCP handshake. The question is:
A hacker just set up a TCP connection with a web server in Chicago, Illinois, claiming he is coming in with a source IP address that
clearly belongs to… Continue reading Speed of TCP handshake to prove an IP is spoofed [closed]
It happens that I participate in a bug hunting program and analyzing the app I realized that there is a particular parameter that is very important for access control and that only changes with the IP address.
Anyway, the question here is … Continue reading Can I change my public IP address to a specific one?
I was thinking of the following scenario :
a network is behind a router (performing NAT) and firewall
this firewall denies all unsollicited incoming packet
a user on a computer of the network opens a browser, types in “http://www.company1… Continue reading Prevent IP session hijacking
in a certain page I have a newsletter subscription form, where the user enters his e-mail address and then through PHP an authenticated e-mail is sent to myself with the user’s information (e-mail address he declared, IP address, Hostname,… Continue reading php / email / iis
Let’s say my pc IP address is 192.168.10.1 and my laptop IP address is 192.168.10.42 and I want to spoof the IP address of my phone and I want to see the traffic that is going through my phone. How is it possible? What are the commands for… Continue reading How to spoof the IP address when we are on same network?
Let’s say that I’m connected to a network where the ISP has setup a dst-nat from an IP they don’t control to an IP that they control,like so:
1- Their DNS server resolves example.xyz to 1.1.1.1 (the ISP doesn’t own/control this IP)
2- Th… Continue reading Is it possible to gather information about a destination-nat host?
The attacker spoofs SYN packets to attack a server.
In this document:
Spoofed Attack: A malicious user can also spoof the IP address on each SYN packet they send in order to inhibit mitigation efforts and make their identity more di… Continue reading Whether ISPs provide path of Spoofed SYN Flood attack is the only way to trace the attack source?
I read on Wikipedia’s Article on SNMP
SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs
over TCP or UDP, and is a subject to bypassing device access lists
that might have been implemented to restrict SNMP access… Continue reading Why is SNMP vulnerable to IP Spoofing?
I have a bunch of users that are all behind the same VPN. My website (outside of the VPN) is supposed to be only accessible for these users. There is no guest for this VPN. My website is https only. Is it acceptable in this case to rely on… Continue reading Using IP as authentication
My mother received an SMS around 10 months to 1 year ago that she has a court case with whatever serial number. We thought it’s a scam at first and ignored it since we didn’t know you could be called to a court by just a SMS.
A week ago h… Continue reading illegal activities with someone else’s ip [closed]