IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browsers, or gain access to a network.

learn more… | top users | synonyms

0
votes
0answers
43 views

“[!] Something went wrong.. Try again” sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
0
votes
1answer
33 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
1answer
49 views

Making a Judgement on a User's IP Usage

We have a click exchange-type web application that allows users to receive stats boosts within a game. Stats boosts are based off unique IP addresses which poses a problem for users who use proxies or ...
0
votes
1answer
50 views

Acceptable secure solution to replace static IP addresses for a web application

I am currently working as a technical lead on a project at a financial institution and have a question about how to provide the same level of security expected by the business in an application we are ...
5
votes
1answer
138 views

Can IPs be trusted inside a VPN?

Question I have several linux clients connected to an OpenVPN server. Each client is given a persistent IP based on their X509 Common Name. Can I trust these IPs ? Context I have Client1 and ...
5
votes
1answer
126 views

Explain the last part of how Mitnick hacked Tsutomu Shimomura with an IP sequence attack

I was reading up on why TCP ISNs need to be randomized, which led me to this write up by Tsutomu Shimomura. I understood how IP address spoofing and predicting the ISN helped the attacker establish a ...
0
votes
2answers
119 views

Need To Learn About IP Address

I work on a U.S. government crisis/suicide hotline as a rescue coordinator. We receive phone calls, (mostly cell) text, and, chat from all over the world. Most times the caller/chatter will not ...
1
vote
2answers
101 views

Am I exposing my application to IP address forgery / ip spoofing?

Here is my setup: I will create two REST services that are run on Server B and should only be called from Server A. Both servers are on the same network and I am not able to configure a firewall to ...
-2
votes
3answers
144 views

Basics - IP spoofing

I can't understand why IP spoofing (even basic) is very limited. Suppose Bob and Alice are about to communicate and Eve can see network communication, why eve can't use IP spoofing for making "Man ...
12
votes
3answers
4k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
0
votes
1answer
130 views

Is it safe to use IP Addresses as an identity?

I have a website where users can generate links. I'd like to limit 10 links to a user, but would also like to avoid requiring a login/email. I was thinking about using the IP Address as an identity ...
1
vote
0answers
145 views

Can a hacker use someone else's IP address when running a scam?

I have a friend who works on a ship currently in Accra, Ghana. We do video chats but his system is extremely slow and sluggish. There have been times where our only form of communication is IM. A ...
2
votes
1answer
43 views

Virtualisation: security on the host side

Virtualised environments are focused on isolating the guest OS. Using the VirtualBox model, the guest might be behind a virtual NAT and/or talk only with other VMs via internal networks, and only ...
2
votes
0answers
159 views

NFS IP spoofing

I am using VirtualBox: where the guest is an Arch ISO and the host Windows/Cygwin or a generic Linux. For sharing host folders, VB native shared folders is not an option (since the setup requires ...
1
vote
1answer
1k views

How to tell computer of origin sending email messages? [duplicate]

I’m not a security expert. I wasn't sure if I should post this question here or in "exploit". I have searched for answers before posting.... Could anyone tell me how I can determine if emails are ...
1
vote
0answers
160 views

How to keep an internal node from spoofing an internal server's IP and thereby getting the server blocked by active defenses?

In an internal network, all machines are firewalled from each other. The firewall has port scan detection and blocking mechanism (say, psd module of iptables). Question: What are the ways I can block ...
-2
votes
1answer
207 views

How can they catch me, how can i hide my self [duplicate]

Im using a website and somehow they can find out that i am using a proxy. My first question is how can they do. How can they find out this? And Second what can i do i mean how can i hide my self, is ...
1
vote
1answer
557 views

Spoofing public IPv4 address

How can I spoof my public IPv4 address to another without using proxys? I don't need any response, the TCP handshake needn't be completed! I just want to send a SYN packet with spoofed (specific) ...
2
votes
2answers
873 views

Practical ways to prevent Denial Of Service attacks

I am an undergraduate Computer Science student and was hoping to gain some knowledge of ways to help prevent Denial Of Service attacks.I read about some of here: ...
5
votes
2answers
976 views

How does IP address spoofing of a bad address work?

While reading up on iptables, I saw this article from NixCraft recommending that a server block the following bad addresses: 0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 172.16.0.0/12 192.168.0.0/16 224.0.0.0/3 ...
2
votes
2answers
560 views

Is it a real security benefit if a host uses static IP Addresses for authentication?

As my knowledge about information security is not THAT good and Google did not give me a satisfactory answer I would like to ask the community here: I am working for a company offering online ...
1
vote
2answers
79 views

Using pattern matching to make a port more secure

I am planning to make a web application deployed on a port more secure by detecting the pattern of the request an then comparing it with the patern next time that IP tries to connect.Any ways to move ...
0
votes
2answers
217 views

Best practice for sending IP Addresses

IP Addresses are pretty common around the internet so they're often easily found in plain text. However, let's say there's a number of IP addresses configured on a server to allow access through a ...
2
votes
3answers
1k views

Is it possible to change IP after each request

I am developing a web application. I am planning to skip CAPTCHAs for the initial signup by an IP so as to improve user experience. I was wondering if I am inviting any security risks by doing this. ...
0
votes
1answer
182 views

Security against IP Spoofing without consulting network administrator

I was wondering that if there is a Local Area Network and one public IP,through which various clients connect(which have been allocated private IP's).Suppose one of the clients spoofs his IP to try to ...
0
votes
3answers
2k views

Can one use IP-spoofing to anonymize DDOS attacks?

Since it is possible to fake the source-ip of an ip-package, is it also possible to anonymize DDOS-attacks?
-1
votes
1answer
264 views

How does IP Spoofing increase the upload speed?

I was talking earlier to a script kiddie and claimed that IP spoofing can increase the upload speed in a DDOS attack?! that does not make any sense to me According to him if your server has an upload ...
1
vote
2answers
280 views

Isolating guest networks

I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network. Initially, I used IP filtering ...
1
vote
2answers
305 views

Security against IP Spoofing

I am pursuing a college project, in which I am running three fake services on three ports to protect the main service (say running at port 80). The concept is that if the user is malicious, he'll try ...
1
vote
3answers
15k views

How to find the actual address of spoofed IPs?

I am convinced that it is possible to find out the real IP address of computer which has spoofed its address. I find it rather unlikely that no techniques exist against IP spoofing. How is it ...
0
votes
0answers
26 views

MAC changer and VPN can be trusted? [duplicate]

I must spoof my identity for some reason. Are Technitium Mac Address Changer App on windows and VPN is a trusted way to be anonymous?
1
vote
1answer
826 views

How does IPSec protect against IP spoofing?

IPsec is a security mechanism that provides peer-entity authentication, data-origin authentication, data integrity, and optionally data confidentiality. It relies on extensions to the standard IP ...
0
votes
1answer
419 views

Preventing DDoS from faked IP address [duplicate]

According to this answer, it's possible to send a network packet with a forged source IP address. So, what methods a server administrator can take to prevent/block a countless requests from faked IP ...
1
vote
4answers
579 views

How to figure out who is pummeling my WP install with bogus login attempts

I have a WordPress install which uses the plugin Wordfence. I set Wordfence to block the IP of anyone trying to log in with a non-existent username. For several months now, I have been getting many ...
-1
votes
1answer
1k views

IP packet generate manually? [closed]

I have heard that we can create ip-packets by our own and send it to a network or a host. How this Can Be Done ?Please Explain step by step??
2
votes
2answers
2k views

In a LAN environment, can you fake the IP address while also being able to receive the response?

Looks like nmap could fake source IP address, and getting a valid response, but only in LAN environment. I'm not sure how it works, here's my thought, You created a packet with fake IP address and a ...
-3
votes
1answer
1k views

Track IP address of criminals [closed]

Quite recently someone had maliciously stolen my pictures and created a fake Facebook and Instagram in my name, with abusive captions under my pictures. However, with the advice from the police, I had ...
0
votes
2answers
8k views

Can you track someone using a proxy? [duplicate]

This is past experience, and is not the case anymore since I am a programmer now and have nothing to do with security anymore. However in the past I had a person constantly trying to make comments of ...
9
votes
3answers
3k views

Is it possible to pass TCP handshake with spoofed IP address?

Little time ago, me and my friends argued if TCP handshake can be passed with a spoofed IP address. Assume I have a https web server that allows only admin's IP numbers. Can anyone connect that web ...
3
votes
1answer
197 views

Side Channel Attack Query

People Generally spoof their IP address by using any other device's ip address such as printer, scanner. My question is in this kind of particular attack why we are using these devices rather than ...
5
votes
6answers
6k views

Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet?

I mean if the attacker tries to ask all the open DNS resolver respond to a web server. The web server can just block its UDP ports. If the all the DNS response go to a Authoritative ...
-2
votes
1answer
411 views

Spoofed DDoS mitigation / DNS amplification mitigation [duplicate]

Recently my server has been attacked multiple times, after looking at my firewall I've come to the conclusion that the IP's are spoofed. (10,000+ IP's connect at once) I'm running Win server 2012 x64 ...
6
votes
3answers
2k views

TCP Sequence Prediction and it's prominence in modern systems/networks

I have a question regarding your experience of TCP Sequence Prediction that I am hoping someone could help with. I am aware of how TCP Sequence Prediction works and how the connection can be hijacked ...
17
votes
3answers
1k views

Vulnerable code suggested on OWASP?

Session Hijacking Prevention It is good practice to bind sessions to IP addresses, that would prevent most session hijacking scenarios (but not all), however some users might use anonymity ...
2
votes
2answers
1k views

Does “loose source and record route” drop the source address?

Is the source IPv4 address lost when a person uses "loose source and record route" and the destination address is put before the end of the list of addresses through which routing should occur? It ...
6
votes
2answers
91 views

What information should I provide to a website or organization when notifying them that their domain may be sending out spam?

Over the past few days, I've received several spam emails coming from the addresses of a school district. I don't know much about email message headers, but since they contain numerous references like ...
1
vote
1answer
177 views

Do WPA-Enterprise implementations have built-in anti-IP-spoofing?

i'd like to know if WPA-Enterprise implementations have built-in anti-IP-spoofing. here's what i mean: it seems to me like IP spoofing should be easily detectable and handled under WPA-Enterprise. ...
14
votes
4answers
14k views

How are spoofed packets detected?

My assumption: When a firewall is configured to drop spoofed packets, it tries to ping (not necessarily ICMP) the source IP and sees if it belongs to a real host or if it's up, and if not, it drops ...
3
votes
4answers
3k views

How can an internet contest verify unique votes with only an email as an input parameter?

For my computer security course we are brainstorming different ways to use attributes for a unique user (that are readily available over a network) to prevent various mischievous activities. We've ...
3
votes
2answers
2k views

IP forgery (theories are fine)

Is there any (practical/theoretical) way to forge your IP address? By forging i mean feed to the WEbsite the IP you want. let take PHP as example: You need me to think that your IP address is ...