IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browsers, or gain access to a network.

learn more… | top users | synonyms

14
votes
6answers
4k views

How does a server obtain the IP Address of a user?

How does a server obtain the IP Address of a user? Is it possible to fool the server by spoofing the IP Address?
4
votes
3answers
6k views

How can I trace the IP address of person in chat?

Is it possible to trace my IP address when I am chatting with others (with gtalk or Facebook)? If so, how could someone do that?
4
votes
5answers
2k views

GET request with different IPs

I need to check vulnerability in my polling system. So I need to send GET requests but every time with different IPs. Can anyone suggest something?
3
votes
3answers
795 views

How can I make it more difficult for a user to create multiple accounts?

I would like to know the best way to increase security on a website so that the a single user can't create multiple accounts. What all of a user can be traced? I'm thinking: IP address Mac address ...
16
votes
6answers
1k views

What security risks does IP spoofing bring?

By manipulating the TCP packet and changing the source address one is able to spoof the IP. As I understand it, you will not be able to set up a full handshake by doing this, as you will never receive ...
1
vote
4answers
9k views

Netcat IP Spoofing

I am connecting to a server nc -v 192.168.0.1 1111 But I want to do IP spoofing because the server on 192.168.0.1 only accepting commands from 7.7.7.7. We are two friends, I am 192.168.1.1, and my ...
8
votes
3answers
4k views

Can I trust the source IP of an HTTP request?

As far as I've understood, if you try to issue a HTTP request with a spoofed IP address, then the TCP handshake fails, so it's not possible to complete the HTTP request, because the SYN/ACK from the ...
1
vote
2answers
1k views

IP Spoofing a threat?

Quick Security Question if i may. We have an internal Intranet system which is only accessible from a few internal vlans, our main external firewall blocks all access to the internal webserver – or ...
-5
votes
0answers
71 views

IP Adress Spofing via ncat,nc etc [duplicate]

Possible Duplicate: Netcat IP Spoofing I want to ask one question to you. My friend and i playing game together.He is using below command this computer. ncat -u -c /bin/bash --allow ...
5
votes
1answer
362 views

Ingress RFC1918 spoofing: How to handle it?

I've seen packets originating from RFC1918 addresses from two fairly large european ISP's (ASN1257 & smaller ASN35706) coming in on eBGP transit links lately, and I'm a bit puzzled why it wouldn't ...
3
votes
3answers
1k views

How secure can IP based login be?

From several security books and sites I understand that IP-based security (with which I mean: user is verified only by IP address) is a bad idea. Our idea is not new: we want a one-time validation and ...
2
votes
2answers
634 views

Reveal the True IP of a User

Is there any best practice method (and preferably documented) way of revealing the True IP of a user using a HTTP(S) connection? I.e.: To be able to uncover the true IP from transparent as well as ...
4
votes
5answers
2k views

Is it trivial to bypass IP blocking?

There is a site with IP blocking. When a client makes too many invalid attempts when guessing e.g. password, then their IP address becomes blocked. I've heard about IP spoofing and similar attacks. ...
9
votes
2answers
2k views

Is IP spoofing relevant to TCP? Is it relevant for TLS or SSH?

I have read the TCP Connection Establishment on Wikipedia In brief the packets to start are SYN, with a (hopefully) random sequence number A from the client. SYN-ACK, responding, with A+1 and ...
5
votes
2answers
9k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
5
votes
2answers
1k views

Why would the browser present the certificate for an unknown outside site?

The first time each day that I attempt click on the 'Mail' link from the Yahoo home page, my browser (Seamonkey) throws up a dialog with the title 'Secure connection failed'. The content in the ...
3
votes
1answer
2k views

Spoofing email From address

Providing all legal measures are taken care of, what are some of the ways someone can spoof an email "From" field address and actually get the email to the recipient without spam filters getting in ...
8
votes
1answer
721 views

Spoofed IPv4 and IPv6 addresses over the internet

I have a few questions regarding IPv4 and IPv6 spoofing. Might as well just list them to be concise: What's the usual routing policy for ISPs' routers in regards to spoofed source addresses? i.e. if ...
8
votes
2answers
4k views

How easy/difficult is it to spoof DNS? Are some scenarios safer/more risky than others?

Practically speaking, how easy difficult is it to spoof DNS? What scenarios are more risky than others? For example: A phishing email or twitter link that attracts users to click a hyperlink A ...
0
votes
0answers
79 views

Pages restricted to certain IPs, safe? [duplicate]

Possible Duplicate: In what scenarios is relying on source IP address as a security control acceptable/unacceptable? If a website has a page which only renders for certain IPs, is there ...
5
votes
3answers
424 views

Solaris: IP Spoofing Across Ethernet Ports

Given a Solaris machine with two network interfaces corresponding to the separate ethernet ports in the back. 0: 192.168.0.5/255.255.255.0 1: 192.168.1.5/255.255.255.0 with /etc/defaultrouter set ...
3
votes
1answer
324 views

What kind of nefarious deeds can IP address Spoofing be used for? [duplicate]

Possible Duplicate: What security risks does IP spoofing bring? I found this article, which seems pretty good but was written in 2003 so I'm not sure how up to date it is. Can IP address ...
6
votes
4answers
719 views

How can a company reduce exposure to packet spoofing? What solution should exist, but doesn't?

I'd like to understand what anti-packet-spoofing technology exists (or should exist) to verify an inbound packet. Maybe this is as simple as a Cisco ACL, Firewall Rule, implemented at the network ...
16
votes
2answers
635 views

In what scenarios is relying on source IP address as a security control acceptable/unacceptable?

I've noticed that there's a number of questions where relying on source IP address as a control gets mentioned and in most gets dismissed as being unreliable. I'd be interested in hearing from anyone ...
8
votes
3answers
259 views

Verify a website user is behind corporate firewall?

We have a public ecommerce website hosted at our datacenter onsite. For people who are within the corporate firewall hitting the website I want to display profiling information about the request of ...
2
votes
1answer
308 views

IP Conflicts / Spoofing

Are there any products / os that behave differently when an duplicate IP address is detected. This may indicate an IP spoof ? Can TCP stack 'shutdown' or stop in order to protect itself ?
10
votes
3answers
548 views

Are there valid reasons for spoofing an address?

This is a corollary to the question Why don't ISPs filter on source address to prevent spoofing?. Are there valid reasons to spoof an address?