Re: Session Hijacking

["[havoc]" <havoc () threatlab com>]

An IDS should be able to pick up the ARP storm, source routing violations,
and DoS attack that typically accompanies a session hijack.

hunt is a decent hijack tool I've used in the past.

-Warren.


----- Original Message ----- 
From: "Terry Ray" <cibert () gmail com>
To: <focus-ids () lists securityfocus com>
Sent: Wednesday, March 02, 2005 12:15 PM
Subject: Session Hijacking


> Question, I am learning about session hijacking, and I was wondering
> if an IPS has the capabilities to detect and prevent this type of
> attack? If so how exactly would the IPS prevent a session hijacking?
>
> -- 
> Terry N.
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> --------------------------------------------------------------------------



--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------