Tag Info

New answers tagged


Yeah it is! Every network REQ[SYN] is attributed with a PID [Packet ID] Dest and SRC, In some ways people can craft a PID and spoof with another IP that visited your website before, If the request got cached on your server, Someone can 'Get' the IP of another people though the PID. That only will apply if an attacker send to you server an RESET[RST] request ...


The attacker can still spoof the IP address and use bank's IP address, but the response from your website will go to the spoofed IP address (bank's IP address) and not to the attacker's actual IP address. Usually a TCP handshake is required to initiate a TCP connection. HTTP uses TCP. The attacker will send a SYN packet with spoofed IP(bank's IP), your ...

Top 50 recent answers are included