Hot answers tagged

3

According to several of these answers: http://serverfault.com/questions/381393/can-the-ip-address-for-an-http-request-be-spoofed It is really unlikely that you could indeed spoof the IP address and send a full HTTP request to a server. TCP requires a three-way handshake, which means sending one packet back to the sender and expecting a very specific answer ...


2

The two major attack vectors that spring to mind are Non-Blind and Blind spoofing, which make use of spoofed IP's and TCP to take control of a IP/TCP session. Although the Non-Blind attack in particular may not be prevented by Source address validation. When on the same subnet as an attacker, hijacking of a legitimate TCP connection is possible by sniffing ...



Only top voted, non community-wiki answers of a minimum length are eligible