Collaborate Disseminate
We have a few Windows server VMs hosted in Amazon cloud. Users need to enter account and password to RDP to the VMs.
The VMs’ RDP EndPoint (IP+Port) is public to the internet.
As an extra security measure, we managed to restrict access to… Continue reading IP Spoofing: How secure is to control access by user’s public IP address?
Many websites require JavaScript. However, enabling JS means that a website can run a JS snippet to retrieve the user’s IP address (even if they are behind a proxy or VPN).
So, how can I (the user) feed (spoof) the VPN IP address (which I… Continue reading How to spoof my IP address to JavaScript and other security concerns
I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else.
When I spoof X-Forwarded-For IP and go to http://whatsmyuseragent.com/ I see a … Continue reading Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR
I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else.
When I spoof X-Forwarded-For IP and go to http://whatsmyuseragent.com/ I see a different IP a… Continue reading Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR
Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies.
Request from victim
Query ID: 1ac23
What is the ip address of w… Continue reading DNS resolution attacks by flooding spoofed replies
I have a website where users can generate links. I’d like to limit 10 links to a user, but would also like to avoid requiring a login/email. I was thinking about using the IP Address as an identity system.
Is this a bad idea… Continue reading Is it safe to use IP Addresses as an identity?
In an internal network, all machines are firewalled from each other. The firewall has port scan detection and blocking mechanism (say, psd module of iptables).
Question: What are the ways I can block internal port scans whil… Continue reading How to keep an internal node from spoofing an internal server’s IP and thereby getting the server blocked by active defenses?
I have seen from:
http://www.scientificamerican.com/article/tracking-cyber-hackers/
"The source field can be changed [spoofed] by an attacker to make it
seem like it’s coming from someplace it’s not"
From what I know, IP spoofi… Continue reading Tracing the attacker
I am convinced that it is possible to find out the real IP address of computer which has spoofed its address. I find it rather unlikely that no techniques exist against IP spoofing.
How is it possible to find out the addre… Continue reading How to find the actual address of spoofed IPs?
Little time ago, me and my friends argued if TCP handshake can be passed with a spoofed IP address.
Assume I have a web server that allows only certain IP addresses.
Can anyone connect that web server by IP spoof?
Continue reading Is it possible to pass TCP handshake with spoofed IP address?