Vulnerability Development mailing list archives

Re: spoofing the ethernet address


From: thegnome () NMRC ORG (Simple Nomad)
Date: Wed, 1 Mar 2000 08:38:39 -0600


Use libnet and link layer writing to the wire... this allows a lot of
control, and might work depending on your architecture. Also look around
on the L0pht's web site as Kingpin wrote a paper that I believe covered
the subject.

-         Simple Nomad          -  No rest for the Wicca'd  -
-      thegnome () nmrc org        -        www.nmrc.org       -
-  thegnome () razor bindview com  -     razor.bindview.com    -

On Tue, 29 Feb 2000, Bobby, Paul wrote:

Been playing with hping, and I imagine other IP spoofing tools generate the
same types of packets.

The spoofed packet contains a bogus IP address, yes. However the ethernet
address (MAC) is the address of the sending machine.

Is it possible to spoof this address also? Would someone have to write a
custom ethernet driver?

Paul Bobby
-----------------
<dream> Got Root? </dream>



Current thread: