Re: RE: Session & IP Spoofing

["Nexus" <nexus () patrol i-way co uk>]

----- Original Message ----- 
From: "pire pire" <pirepire69 () romandie com>
To: <MThompson () brinkster com>; <pen-test () securityfocus com>
Sent: Thursday, December 04, 2003 9:54 AM
Subject: RE: RE: Session & IP Spoofing


> No I don't care about the return traffic! All I
> need is to sen I GET request with a spoofed IP!

But you would also need to spoof the TCP 3-way handshake before you can even
send the HTTP GET request, which is um..... non-trivial ;-)

Cheers.


---------------------------------------------------------------------------
----------------------------------------------------------------------------