Vulnerability Development mailing list archives

Re: hijacking TCP connections on FreeBSD


From: martin f krafft <madduck () madduck net>
Date: Wed, 10 Jul 2002 21:22:32 +0200

also sprach jmiller <secadmin () subversive cc> [2002.07.10.0711 +0200]:
a man in the middle is not neccessary, you sniff the packets, spoof your ip
and or mac, then dos the other box you are spoofing. there is a *nix tool
that will do an arp flood, turning all switches into a hub, so you do not
need to be on the same subnet either. search for it on freshmeat.net

switches and hubs don't separate subnets. you will have to be on the
same subnet regardless of the possibility to arpflood switches (only
the cheapest), or you guess replies and hijack blindly.

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
  
"one should never trust a woman who tells her real age.
 if she tells that, she'll tell anything."
                                                        -- oscar wilde

Attachment: _bin
Description:


Current thread: