Hot answers tagged

2

Since NAT allows only replies to outbound connection no direct attacks from outside to inside are possible. But simple denial of service attacks are still possible. And while (D)DOS does not affect the inside network directly it can lead to a denial of critical services which need the access to the outside, like phone (VoIP) or smart home services. ......


1

The real AS to feed a false route is any AS along the AS path: 7908 --> 20080 --> 1251 --> |28571| |52888| --> 6447 you see in the 2 wrong announces of route to: 8.8.8.8/32 Hence all traffic toward 8.8.8.8/32 shoud be routed since this attack through ASes: |28571| |52888| --> 1251 --> 20080 --> 7908 ...


1

TOR fulfils both your requirements quite nicely. Additionally, for your first point, there was no routing protocol used, as such - attackers would literally connect to a 2nd machine, and from there connect to a third etc - using plain old TCP/IP.


1

Most of the topics you address will be introduced briefly in the course. I wouldn't say there is anything you mandatorily need to know before you start the course. I think I knew closed to nothing about nmap when I started, for instance. I think the question "what do I need to know in order to start" misses the point. The point is "am I willing to learn and ...


1

... a router without a firewall ... using MASQUERADE Masquerading is not a routing functionality because it changes the source of the packet. Instead you actually need a stateful firewall to do the masquerading. Which means that if masquerading is involved you must also have a firewall there. This of course says nothing about the configuration of the ...


1

You don't appear to be as aware of the networking as you think. But let's go anyway. First, nothing stops you from assigning 111.222.xxx.xxx as your PC IP address. It's your PC after all, you can put anything you want. But you will accomplish nothing with this. Why? A lot of reasons: Default gateway: You probably aren't on the 111.222.xxx.xxx network (...


1

I.e without access to others computer. I'm assuming that you mean that A cannot access the computer of B and B not of A, but they can access other computers on the internet. Since information are not exchanged directly between parties but involve multiple hops there are several ways to intercept the data. Just to give you an idea what can be done here are ...



Only top voted, non community-wiki answers of a minimum length are eligible