IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browsers, or gain access to a network.

learn more… | top users | synonyms

3
votes
1answer
56 views

What other attacks can be deployed using IP spoofing other than DoS(and DDoS) attacks ?

I want to know the other attacks which are associated with IP spoofing because, we're trying to implement Source Address Validation (SAVA) and wanted to where else can Source Address validation ...
2
votes
1answer
37 views

Wired Deauth-Like Attacks

[story] Good Evening Guys, I just got out of a lan house which uses a system named Geto (Geto Lan House Management System 4.0), and I was wondering if it is hackable. [/story] While searching for ...
4
votes
1answer
75 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
2
votes
1answer
59 views

Spoofing IP address as being local over the Internet

I know it is trivial to spoof your IP address with UDP: simply change the value of the source address in the IP header and the recipient has no idea where the packet actually came from. My question ...
3
votes
2answers
93 views

IP Spoofing: How secure is to control access by user’s public IP address?

We have a few Windows server VMs hosted in Amazon cloud. Users need to enter account and password to RDP to the VMs. The VMs’ RDP EndPoint (IP+Port) is public to the internet. As an extra security ...
2
votes
2answers
146 views

Spoof another IP address in the same network,will the spoofing source get the response?

I have read some articles about IP spoofing. Briefly speaking, IP-spoofing means the attacker uses a fake IP address in the IP header, to pretend this IP packet is sent by another machine. The ...
6
votes
2answers
458 views

Is IP spoofing still a threat in the Internet?

I heard that IP spoofing is now mostly blocked by ISPs, especially on the consumer-grade links. Is there any research on the number of networks that still allow users to spoof an IP packet with an ...
1
vote
1answer
125 views

How to know somebody's IP? (Fraud victim) [duplicate]

I was victim of fraud (fool me) in Mexico and my only hint is a GMail account, so I can contact him from an anonymous mail. From what I've read, GMail's headers don't contain the sender's IP. What ...
1
vote
2answers
102 views

Unencrypted FTP to transfer encrypted data - okay if IP-restricted?

If unencrypted FTP over the public internet is the only file transfer option for a particular situation, what security concerns are applicable assuming: The data being transferred is strongly ...
2
votes
3answers
386 views

How to spoof my IP address to JavaScript and other security concerns

Many websites require JavaScript. However, enabling JS means that a website can run a JS snippet to retrieve the user's IP address (even if they are behind a proxy or VPN). So, how can I (the user) ...
7
votes
2answers
1k views

Spoof IP adress after a TCP handshake

I know it is not possible to perform a successful TCP Handshake with a spoofed IP-Address. However I wonder: Is it possible to spoof the IP once a TCP handshake was performed successfully? For ...
1
vote
1answer
1k views

Difference between X-Forwarded-For IP, X-Real-IP, VPNs and TOR

I have this Google Chrome Privacy Preserving Extension that I am working on. Where I can spoof the header information e.g user agents and else. When I spoof X-Forwarded-For IP and go to ...
0
votes
2answers
129 views

Faking IP address without being aware of returning response

I read different articles on the subject (Spoofing IP address), someone said: Spoofing an IP is usually better suited to "fire-an-forget" scenarios like DDoS. due to TCP two-way communication ...
0
votes
0answers
260 views

“[!] Something went wrong.. Try again” sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
0
votes
1answer
77 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
1answer
58 views

Making a Judgement on a User's IP Usage

We have a click exchange-type web application that allows users to receive stats boosts within a game. Stats boosts are based off unique IP addresses which poses a problem for users who use proxies or ...
0
votes
1answer
105 views

Acceptable secure solution to replace static IP addresses for a web application

I am currently working as a technical lead on a project at a financial institution and have a question about how to provide the same level of security expected by the business in an application we are ...
5
votes
1answer
405 views

Can IPs be trusted inside a VPN?

Question I have several linux clients connected to an OpenVPN server. Each client is given a persistent IP based on their X509 Common Name. Can I trust these IPs ? Context I have Client1 and ...
5
votes
1answer
247 views

Explain the last part of how Mitnick hacked Tsutomu Shimomura with an IP sequence attack

I was reading up on why TCP ISNs need to be randomized, which led me to this write up by Tsutomu Shimomura. I understood how IP address spoofing and predicting the ISN helped the attacker establish a ...
1
vote
2answers
194 views

Need To Learn About IP Address

I work on a U.S. government crisis/suicide hotline as a rescue coordinator. We receive phone calls, (mostly cell) text, and, chat from all over the world. Most times the caller/chatter will not ...
1
vote
2answers
145 views

Am I exposing my application to IP address forgery / ip spoofing?

Here is my setup: I will create two REST services that are run on Server B and should only be called from Server A. Both servers are on the same network and I am not able to configure a firewall to ...
-3
votes
3answers
267 views

Basics - IP spoofing

I can't understand why IP spoofing (even basic) is very limited. Suppose Bob and Alice are about to communicate and Eve can see network communication, why eve can't use IP spoofing for making "Man ...
14
votes
3answers
5k views

How does the hacker manage to spoof a different IP address?

For the last 2 days, +/- every 15 minutes, someone is attempting to sign-in to my online email account. When I verify recent activity, the IP address (and the corresponding country) is different for ...
0
votes
1answer
212 views

Is it safe to use IP Addresses as an identity?

I have a website where users can generate links. I'd like to limit 10 links to a user, but would also like to avoid requiring a login/email. I was thinking about using the IP Address as an identity ...
2
votes
1answer
259 views

Can a hacker use someone else's IP address when running a scam?

I have a friend who works on a ship currently in Accra, Ghana. We do video chats but his system is extremely slow and sluggish. There have been times where our only form of communication is IM. A ...
2
votes
1answer
49 views

Virtualisation: security on the host side

Virtualised environments are focused on isolating the guest OS. Using the VirtualBox model, the guest might be behind a virtual NAT and/or talk only with other VMs via internal networks, and only ...
2
votes
0answers
284 views

NFS IP spoofing

I am using VirtualBox: where the guest is an Arch ISO and the host Windows/Cygwin or a generic Linux. For sharing host folders, VB native shared folders is not an option (since the setup requires ...
1
vote
1answer
2k views

How to tell computer of origin sending email messages? [duplicate]

I’m not a security expert. I wasn't sure if I should post this question here or in "exploit". I have searched for answers before posting.... Could anyone tell me how I can determine if emails are ...
1
vote
0answers
226 views

How to keep an internal node from spoofing an internal server's IP and thereby getting the server blocked by active defenses?

In an internal network, all machines are firewalled from each other. The firewall has port scan detection and blocking mechanism (say, psd module of iptables). Question: What are the ways I can block ...
-2
votes
1answer
275 views

How can they catch me, how can i hide my self [duplicate]

Im using a website and somehow they can find out that i am using a proxy. My first question is how can they do. How can they find out this? And Second what can i do i mean how can i hide my self, is ...
1
vote
1answer
1k views

Spoofing public IPv4 address

How can I spoof my public IPv4 address to another without using proxys? I don't need any response, the TCP handshake needn't be completed! I just want to send a SYN packet with spoofed (specific) ...
2
votes
2answers
2k views

Practical ways to prevent Denial Of Service attacks

I am an undergraduate Computer Science student and was hoping to gain some knowledge of ways to help prevent Denial Of Service attacks.I read about some of here: ...
5
votes
2answers
1k views

How does IP address spoofing of a bad address work?

While reading up on iptables, I saw this article from NixCraft recommending that a server block the following bad addresses: 0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 172.16.0.0/12 192.168.0.0/16 224.0.0.0/3 ...
2
votes
2answers
708 views

Is it a real security benefit if a host uses static IP Addresses for authentication?

As my knowledge about information security is not THAT good and Google did not give me a satisfactory answer I would like to ask the community here: I am working for a company offering online ...
1
vote
2answers
86 views

Using pattern matching to make a port more secure

I am planning to make a web application deployed on a port more secure by detecting the pattern of the request an then comparing it with the patern next time that IP tries to connect.Any ways to move ...
0
votes
2answers
352 views

Best practice for sending IP Addresses

IP Addresses are pretty common around the internet so they're often easily found in plain text. However, let's say there's a number of IP addresses configured on a server to allow access through a ...
2
votes
3answers
2k views

Is it possible to change IP after each request

I am developing a web application. I am planning to skip CAPTCHAs for the initial signup by an IP so as to improve user experience. I was wondering if I am inviting any security risks by doing this. ...
0
votes
1answer
222 views

Security against IP Spoofing without consulting network administrator

I was wondering that if there is a Local Area Network and one public IP,through which various clients connect(which have been allocated private IP's).Suppose one of the clients spoofs his IP to try to ...
1
vote
4answers
3k views

Can one use IP-spoofing to anonymize DDOS attacks?

Since it is possible to fake the source-ip of an ip-package, is it also possible to anonymize DDOS-attacks?
-1
votes
1answer
314 views

How does IP Spoofing increase the upload speed?

I was talking earlier to a script kiddie and claimed that IP spoofing can increase the upload speed in a DDOS attack?! that does not make any sense to me According to him if your server has an upload ...
1
vote
2answers
389 views

Isolating guest networks

I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network. Initially, I used IP filtering ...
1
vote
2answers
359 views

Security against IP Spoofing

I am pursuing a college project, in which I am running three fake services on three ports to protect the main service (say running at port 80). The concept is that if the user is malicious, he'll try ...
1
vote
3answers
24k views

How to find the actual address of spoofed IPs?

I am convinced that it is possible to find out the real IP address of computer which has spoofed its address. I find it rather unlikely that no techniques exist against IP spoofing. How is it ...
0
votes
0answers
26 views

MAC changer and VPN can be trusted? [duplicate]

I must spoof my identity for some reason. Are Technitium Mac Address Changer App on windows and VPN is a trusted way to be anonymous?
1
vote
1answer
1k views

How does IPSec protect against IP spoofing?

IPsec is a security mechanism that provides peer-entity authentication, data-origin authentication, data integrity, and optionally data confidentiality. It relies on extensions to the standard IP ...
0
votes
1answer
603 views

Preventing DDoS from faked IP address [duplicate]

According to this answer, it's possible to send a network packet with a forged source IP address. So, what methods a server administrator can take to prevent/block a countless requests from faked IP ...
1
vote
4answers
850 views

How to figure out who is pummeling my WP install with bogus login attempts

I have a WordPress install which uses the plugin Wordfence. I set Wordfence to block the IP of anyone trying to log in with a non-existent username. For several months now, I have been getting many ...
-1
votes
1answer
2k views

IP packet generate manually? [closed]

I have heard that we can create ip-packets by our own and send it to a network or a host. How this Can Be Done ?Please Explain step by step??
2
votes
2answers
3k views

In a LAN environment, can you fake the IP address while also being able to receive the response?

Looks like nmap could fake source IP address, and getting a valid response, but only in LAN environment. I'm not sure how it works, here's my thought, You created a packet with fake IP address and a ...
-3
votes
1answer
1k views

Track IP address of criminals [closed]

Quite recently someone had maliciously stolen my pictures and created a fake Facebook and Instagram in my name, with abusive captions under my pictures. However, with the advice from the police, I had ...