Re: IP Spoofing with DHCP ?

[Nathan Einwechter <ceo () investigatecanada com>]

Actually, this has been an attack which has been demonstrated, written on,
and used in the cable networks which are currently present.

What you can do is basically DoS, or wait, untill the other persons box is
down. At this point, it is possible to statically assign your IP to the same
as yours.

Using this method, you can effectively frame someone for doing net attacks
etc. There may be other interesting things you can do with this hijacking of
the IP though, which I haven't thought of. It is also possible to hijack an
SSL or HTTPS session if this is done with the right timing, and a packet
sniffer is utilised. I have actually demonstrated this a few times in the
past.

Hope this helps.

-- Nathan Einwechter
   (PsychoSpy)