Questions tagged [ip-spoofing]
IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browsers, or gain access to a network.
176
questions
0
votes
1
answer
972
views
Can someone spoof its IP address to mine when sending emails?
Can someone spoof its IP address to mine when sending emails?
I know we can see the IP address of the sender in the email header. If someone had my IP, can he/she use it to show in email headers?
Even ...
1
vote
0
answers
90
views
How to access web content protected by network ip? [closed]
I am testing a website that allows content fetch only when you access it from an IP a certain Wi-Fi network. However if you want to access the website from different network, you get the response of
{&...
- 111
1
vote
2
answers
640
views
TCP with IP Spoofing, Is It Really Impossible?
I was reading: IP Spoofing with real IP when TCP 3-way handshake has been made
Where the answer says:
First of all, every TCP packet has a sequential identifier, which
starts at a random position. (...
- 11
0
votes
1
answer
326
views
Client IP spoofing to carry out a TLS conversation, when the server only accepts connections from that client IP?
I am aware that IP spoofing can be used to carry out SYN flooding attacks, and impersonating servers.
However, I have not been able to find detailed step-by-step attack scenarios: where the attacker (...
- 3
0
votes
2
answers
275
views
Reasons why IP spoofing might fail
The way I understand is that if someone wants to pretend to be John Doe by using his IP address to conduct nefarious things on the internet, it would not be possible because
traffic would only be one ...
- 1
0
votes
1
answer
475
views
Can this logic with regard to checking Reverse DNS records be flawed?
For my web app, I hardcode a reverse DNS detection for common web crawlers. And for detecting them I use their Reverse DNS, which I always check whether it includes i.e. google.com. My questions would ...
- 264
1
vote
0
answers
518
views
Is it safe to use conntrack on Linux bridge devices?
I have a server with a number of Linux bridge devices for use with groups of virtual machines - some internet-routed, some intentionally unrouted. I have stateful firewalling in place for traffic ...
- 370
0
votes
1
answer
296
views
Spoofed IP addresses basics
I've been dealing with a hack on a site. I ended up wiping it and starting again - this was no loss as it was a small site and all content was backed up - took a couple of hours to get going again.
I ...
3
votes
3
answers
245
views
What prevents this specific type of attack from being viable?
Imagine a user has an ip of 1.2.3.4
The server the user intends to connect to has an ip of 2.3.4.5
An attacker has a machine with a promiscuous network card on the user's local network.
The attacker ...
0
votes
0
answers
1k
views
How does the NSA "masquerade as any routable IPv4 or IPv6 host"?
I was reading the Wikipedia article about TAO and there is written that:
Details on a program titled QUANTUMSQUIRREL indicate NSA ability to masquerade as any routable IPv4 or IPv6 host. This enables ...
- 529
0
votes
1
answer
639
views
Spoof IP address after a TCP handshake established
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For example:
Perform the handshake
Use the session with the same IP which performed handshake but on
different machine ...
41
votes
6
answers
11k
views
Can I change my public IP address to a specific one?
It happens that I participate in a bug hunting program and analyzing the app I realized that there is a particular parameter that is very important for access control and that only changes with the IP ...
- 565
1
vote
0
answers
303
views
Prevent IP session hijacking
I was thinking of the following scenario :
a network is behind a router (performing NAT) and firewall
this firewall denies all unsollicited incoming packet
a user on a computer of the network opens a ...
- 343
1
vote
1
answer
152
views
php / email / iis
in a certain page I have a newsletter subscription form, where the user enters his e-mail address and then through PHP an authenticated e-mail is sent to myself with the user's information (e-mail ...
- 113
0
votes
2
answers
293
views
Can Machine Learning be utilized to identify and track IP Spoofing?
"IP Spoofing" refers to changing source IP addresses so that the attack appears to be coming from someone else.
When the victim replies to the address, it goes back to the spoofed address ...
- 1
0
votes
0
answers
135
views
Is it possible to gather information about a destination-nat host?
Let's say that I'm connected to a network where the ISP has setup a dst-nat from an IP they don't control to an IP that they control,like so:
1- Their DNS server resolves example.xyz to 1.1.1.1 (the ...
- 111
1
vote
0
answers
162
views
Whether ISPs provide path of Spoofed SYN Flood attack is the only way to trace the attack source?
The attacker spoofs SYN packets to attack a server.
In this document:
Spoofed Attack: A malicious user can also spoof the IP address on each SYN packet they send in order to inhibit mitigation ...
- 935
0
votes
1
answer
752
views
Why is SNMP vulnerable to IP Spoofing?
I read on Wikipedia's Article on SNMP
SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs
over TCP or UDP, and is a subject to bypassing device access lists
that might have ...
- 101
1
vote
5
answers
679
views
Using IP as authentication
I have a bunch of users that are all behind the same VPN. My website (outside of the VPN) is supposed to be only accessible for these users. There is no guest for this VPN. My website is https only. ...
- 19
85
votes
10
answers
17k
views
How and why is my site being abused?
I own a popular website that allows people to enter a phone number and get information back about that phone number, such as the name of the phone carrier. It's a free service, but it costs us money ...
- 699
5
votes
1
answer
2k
views
How likely it is that a hacker spoofed my own IP address when trying to log in to a website?
I got a confirmation code without trying to log in which is what prompted me to investigate this. The account is just a Ubisoft account with 1 free game on it; I somehow doubt there would be ...
- 161
1
vote
1
answer
316
views
Egress filtering - can it be relied upon on the Internet?
My understanding is that IP address spoofing would not be possible if all ISPs would be doing egress filtering. That is, each ISP would not allow any IP packet to go outside of it's network if it sees ...
- 133
1
vote
0
answers
318
views
Best way to let 2 servers communicate (with PHP) avoiding IP Spoofing?
Let's say I have my ServerB that accept any request and it checks the PHPSESSID and compares the IP saved into the session (thanks to session values) with the IP that made the HTTP request. The IP ...
- 154
1
vote
0
answers
163
views
Is it possible to hijack specific e-mail with remote access? [closed]
I was recently presented with e-mails that look like they came from my e-mail and IP address but I didn't send them and never saw them. It is a back and forth correspondence with another gmail account....
1
vote
1
answer
131
views
How do computers store printer presets?
When you connect to a printer on MacOS or Windows, the system stores the printer so you can connect to it later. Does anyone know which criteria is referenced to validate it is the same printer when ...
- 35
38
votes
5
answers
58k
views
Is it possible to spoof an IP address to an exact number? [closed]
The title says it all really. Say my IP address was 1.2.3.4 and I wanted to change or 'spoof' it so that its exactly 2.3.4.5, would this be possible or are there too many varying factors that need to ...
- 483
0
votes
2
answers
2k
views
Websocket connection spoofing
I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically ...
- 787
1
vote
1
answer
327
views
How does IP traceback works? [closed]
In part prompted by the difficulties in determining the true origins
of DDOS attacks featuring spoofed IP addresses, researchers have
attempted to develop the concept of IP traceback: determining ...
- 427
1
vote
0
answers
347
views
health check to test haproxy -- request deny with 200. good idea?
I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
- 31
1
vote
3
answers
9k
views
In ARP spoofing is it two MAC mapping to one IP address OR two IP mapping to one MAC address?
In ARP spoofing, is it two MACs mapping to one IP address OR two IPs mapping to one MAC address?
As far as I understand, it should be two MACs mapping to one IP. But I came across this question which ...
- 11
1
vote
1
answer
2k
views
Topology Configuration on CheckPoint
On CheckPoint firewall (R77), in the Topology config. section that is used for anti-spoofing, is it possible to configure 2 different External interfaces?
I have already an interface configured as ...
- 145
0
votes
1
answer
5k
views
Can Whatsapp be MAC spoofed if the victim's device isn't on the same local network as the hacker's device?
I realize that MAC addresses are only used to tell different devices apart if they are on the same local network. So, what if they're not? Is MAC spoofing in Whatsapp still possible? Even if the ...
-3
votes
1
answer
275
views
Legal advise concerning copyright infringement (BitTorrent) and Wi-Fi hacking [closed]
Someone has hacked into my Wi-Fi and downloaded a film, TV shows and other content over a 2 year period using BitTorrent, I am now being sued by a copyright infringement company.
The TV programs as ...
- 21
1
vote
3
answers
2k
views
Is it possible to hack into secured wifi and download with bit torrent from my IP address?
Is it possible to hack into secured wifi and download using BitTorrent from my IP address? I live in Denmark- if that makes any difference.
We changed to a new WIFI service provider a few years back (...
- 21
7
votes
2
answers
4k
views
Could an attacker spoof a whitelisted IP to access the network?
There is a network that is protected with a firewall and only one IP is whitelisted.
Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
- 71
2
votes
2
answers
2k
views
Is it safe to add IP address to SPF record
I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc..
v=spf1 +...
- 153
3
votes
2
answers
282
views
Find out who sent email with my IP?
Recently my contact list was shared through some emails recently sent from my account. I would like to find out who did this as it has caused me some financial loss.
When I look at the email header, ...
- 31
0
votes
1
answer
3k
views
Is IP spoofing possible in Windows Desktop with user privileges?
I read on WinSockAPI that IP spoofing is disabled for Desktop windows devices (non-servers like Windows 7, etc). However, I've been able to do IP spoofing using nmap, so clearly this is possible. ...
- 872
0
votes
1
answer
2k
views
Web server responding to an HTTP request from a spoofed IP address
Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
2
votes
2
answers
1k
views
Does Session hijacking/IP spoofing happen in real time?
I was reading an e-book about different types of attacks and found this:
A skilled hacker can intercept DNS replies from servers and replace the IP addresses for the requested names with addresses ...
- 29
1
vote
3
answers
8k
views
Someone signed up to a website using my Email address and was created from my IP, but with a different browser? [closed]
Can anyone tell me if this is a hack? otherwise how did they use my email, a different browser and my IP address to create the account?
Any help would be much appreciated
- 35
3
votes
2
answers
1k
views
Why is IP spoofing still possible?
What are valid usages?
Why don't ISPs prevent this by default? Do any major ISPs do this already?
- 1,682
4
votes
2
answers
11k
views
How realistic is it to spoof a specific UDP IP address? [duplicate]
Let's say that I'm a malicious user Bob and I have found a vulnerability in an application that will allow me to impersonate another user, Alice. Alice is connected to 'X' server with her IP address (...
- 41
5
votes
1
answer
3k
views
Is it possible to successfully send a spoofed UDP header with a completely unrelated source IP?
I've read that many networks use ingress/egress filtering to eliminate the number of spoofed UDP packets sent and received by their network.
Given that network provides have been much more diligent ...
- 51
1
vote
2
answers
9k
views
The main difference between IP and ARP spoofing
My question can be broken into two parts:
ARP spoofing attack can appear in various ways but all of them have a similar goal: Take advantage of the lack of L2 authentication by poisoning the target ...
- 125
1
vote
1
answer
4k
views
What is Ingress filtering and how does it work?
I know that Ingress filtering is used to try and verify that a packet actually came from the ip address that it claims to have come from. But how is it possible to verify this when all you have is the ...
- 133
2
votes
2
answers
303
views
Why I am getting logs from Class E IP addresses (Research - Reserved), and my IPS being blocked with threat name "IP Address Spoofed"
Source : 252.205.75.128
Destination : 221.58.178.105
Both IP's do not belong to us. Direction was Inbound.
How is this possible?
Then why are these IP addresses routed to my network ?
- 33
-1
votes
3
answers
12k
views
Best way to keep anonymity inside a VM
If I use a proxy shield inside a VM and spoof my IP address, is there any possibility that someone else ( victim ) can identify the host machine's IP and other details?
What is the best way that we ...
- 1,317
1
vote
2
answers
1k
views
How to get user location using real IP [duplicate]
I recently heard this question:
Can some guys track u using your IP address (what if this guy has access to ISP)?
And I can't find an answer to this question.
Because, I think 99% of people who ...
- 21
1
vote
1
answer
11k
views
Iptables rules to prevent IP Spoofing
We had following below iptables rules that exist in our web front-end boxes to prevent IP Spoofing:
-A INPUT -s 255.0.0.0/8 -j LOG --log-prefix "Spoofed source IP"
-A INPUT -s 255.0.0.0/8 -j ...
- 113