Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ip-spoofing]

IP spoofing, also known as IP address forgery or a host file hijack, is a hijacking technique in which a cracker masquerades as a trusted host to conceal his identity, spoof a Web site, hijack browsers, or gain access to a network.

1
vote
1answer
55 views

How does IP traceback works? [closed]

In part prompted by the difficulties in determining the true origins of DDOS attacks featuring spoofed IP addresses, researchers have attempted to develop the concept of IP traceback: determining ...
1
vote
0answers
37 views

health check to test haproxy — request deny with 200. good idea?

I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
0
votes
3answers
277 views

In ARP spoofing is it two MAC mapping to one IP address OR two IP mapping to one MAC address?

In ARP spoofing, is it two MACs mapping to one IP address OR two IPs mapping to one MAC address? As far as I understand, it should be two MACs mapping to one IP. But I came across this question which ...
1
vote
1answer
242 views

Topology Configuration on CheckPoint

On CheckPoint firewall (R77), in the Topology config. section that is used for anti-spoofing, is it possible to configure 2 different External interfaces? I have already an interface configured as ...
1
vote
1answer
866 views

Can Whatsapp be MAC spoofed if the victim's device isn't on the same local network as the hacker's device?

I realize that MAC addresses are only used to tell different devices apart if they are on the same local network. So, what if they're not? Is MAC spoofing in Whatsapp still possible? Even if the ...
-3
votes
1answer
97 views

Legal advise concerning copyright infringement (BitTorrent) and Wi-Fi hacking [closed]

Someone has hacked into my Wi-Fi and downloaded a film, TV shows and other content over a 2 year period using BitTorrent, I am now being sued by a copyright infringement company. The TV programs as ...
1
vote
3answers
266 views

Is it possible to hack into secured wifi and download with bit torrent from my IP address?

Is it possible to hack into secured wifi and download using BitTorrent from my IP address? I live in Denmark- if that makes any difference. We changed to a new WIFI service provider a few years back (...
1
vote
1answer
181 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
1
vote
2answers
161 views

Is it safe to add IP address to SPF record

I am a programmer who manages online exchanges user also and i have been asked to add IP address to SPF record so that one of the application can hosted on Azure can send emails to user etc.. v=spf1 +...
3
votes
0answers
55 views

Find out who sent email with my IP?

Recently my contact list was shared through some emails recently sent from my account. I would like to find out who did this as it has caused me some financial loss. When I look at the email header, ...
0
votes
1answer
305 views

Is IP spoofing possible in Windows Desktop with user privileges?

I read on WinSockAPI that IP spoofing is disabled for Desktop windows devices (non-servers like Windows 7, etc). However, I've been able to do IP spoofing using nmap, so clearly this is possible. ...
0
votes
0answers
181 views

How to prevent IP Spoofing attack in Rails?

I have been getting an error from my Rails notifier regarding IP Spoof attack ActionDispatch::RemoteIp::IpSpoofAttackError occurred in for confirming its not coming from a crawler I tried the ...
0
votes
1answer
416 views

Web server responding to an HTTP request from a spoofed IP address

Hypothetically speaking - if my web server gets an http request for a given file, say default.html, and let's say the requesting IP address has been spoofed, what happens when my server responds to ...
0
votes
0answers
228 views

iptables: Is an iptables interface filter sufficient to prevent IP spoofing?

Is a router's iptables firewall with an interface-filter as shown in the example below sufficient to prevent the internal network from spoofed IPs? As I understand it, the packages with spoofed IPs ...
2
votes
2answers
774 views

Does Session hijacking/IP spoofing happen in real time?

I was reading an e-book about different types of attacks and found this: A skilled hacker can intercept DNS replies from servers and replace the IP addresses for the requested names with addresses ...
1
vote
3answers
4k views

Someone signed up to a website using my Email address and was created from my IP, but with a different browser? [closed]

Can anyone tell me if this is a hack? otherwise how did they use my email, a different browser and my IP address to create the account? Any help would be much appreciated
3
votes
2answers
679 views

Why is IP spoofing still possible?

What are valid usages? Why don't ISPs prevent this by default? Do any major ISPs do this already?
3
votes
2answers
3k views

How realistic is it to spoof a specific UDP IP address? [duplicate]

Let's say that I'm a malicious user Bob and I have found a vulnerability in an application that will allow me to impersonate another user, Alice. Alice is connected to 'X' server with her IP address (...
5
votes
1answer
961 views

Is it possible to successfully send a spoofed UDP header with a completely unrelated source IP?

I've read that many networks use ingress/egress filtering to eliminate the number of spoofed UDP packets sent and received by their network. Given that network provides have been much more diligent ...
0
votes
0answers
579 views

Openvas. IP blocked by IDS

I did a vulnerability scan for a client server with the OpenVas scanner but after a few minutes my IP address was blocked because the IDS of the server identified the multiple queries related to the ...
1
vote
2answers
2k views

The main difference between IP and ARP spoofing

My question can be broken into two parts: ARP spoofing attack can appear in various ways but all of them have a similar goal: Take advantage of the lack of L2 authentication by poisoning the target ...
1
vote
1answer
2k views

What is Ingress filtering and how does it work?

I know that Ingress filtering is used to try and verify that a packet actually came from the ip address that it claims to have come from. But how is it possible to verify this when all you have is the ...
3
votes
2answers
135 views

Why I am getting logs from Class E IP addresses (Research - Reserved), and my IPS being blocked with threat name “IP Address Spoofed”

Source : 252.205.75.128 Destination : 221.58.178.105 Both IP's do not belong to us. Direction was Inbound. How is this possible? Then why are these IP addresses routed to my network ?
-1
votes
3answers
2k views

Best way to keep anonymity inside a VM

If I use a proxy shield inside a VM and spoof my IP address, is there any possibility that someone else ( victim ) can identify the host machine's IP and other details? What is the best way that we ...
1
vote
1answer
390 views

Tor Exit Node Security & https website

Sometimes I need to make multiple transactions on some websites which only allow 1 transaction per hour per IP address. So to avoid IP address problem I sometimes use TOR browser. I know tor keeps us ...
1
vote
2answers
751 views

How to get user location using real IP [duplicate]

I recently heard this question: Can some guys track u using your IP address (what if this guy has access to ISP)? And I can't find an answer to this question. Because, I think 99% of people who ...
0
votes
1answer
3k views

Iptables rules to prevent IP Spoofing

We had following below iptables rules that exist in our web front-end boxes to prevent IP Spoofing: -A INPUT -s 255.0.0.0/8 -j LOG --log-prefix "Spoofed source IP" -A INPUT -s 255.0.0.0/8 -j ...
0
votes
2answers
460 views

In DoS, does every sent Spoofed IP packet have a different IP?

so, my question is: When a DoS attack occurs and the attacker is using spoofed IP packets, do this packets all carry the same spoofed IP or does every packet have a different IP header? Thanks
6
votes
2answers
781 views

Is BCP38 enough to stop DDOS attacks?

BCP38 is a network security standard which has the scope to prevent spoofing the source of DDOS attacks. The main idea is that the ISP shouldn't forward traffic which is not coming from it's network ...
3
votes
1answer
339 views

In TCP, what happens when two Data packets come in with the same sequential identifier, but different data (spoofed)

I'm trying to verify an answer I posted to a recent question: Client A with real IP has connected ... Now, the attacker machine M sends a [data] packet [with a correct sequential identifier] ...
2
votes
3answers
1k views

IP Spoofing with real IP when TCP 3-way handshake has been made

In a situation, where the spoofed IP is a real existing remote IP and it is found that the TCP 3-way handshake has been made with a server. The MiTM machine sends the packet with spoofed IP to the ...
3
votes
3answers
380 views

Does QUIC really solved IP spoofing problem

Many documents indicates that in QUIC solves IP spoofing problem by a server generated token. Specifically, server issues a token so that the client can use it to identify itself, then the server will ...
44
votes
8answers
8k views

Is it a bad idea to bypass login wall for a specified IP address?

I have a website that is available on the public internet. The website requires authenticated login before any of the content can be accessed. I've been asked if I can remove the login wall for users ...
1
vote
1answer
107 views

How does anycast ensure reliable delivery of IP packets for the same IP address on different locations?

With anycast, it would be possible to have the same IP address at multiple locations in the world, without the need of a proxy or VPN that forwards the packets to its final destination. If you would ...
2
votes
1answer
890 views

IP Spoofing between subnets

I'm new PT. In a test I was required to do, I was given a port in the segment of 172.13.x.x. I was asked to test if I'm able to reach a server at 172.16.x.x. I was wondering (considering there's ...
3
votes
3answers
8k views

Is it possible to send HTTP packet via spoofed IP?

I have the following PHP code that writes accepted to a file named text.txt only if the IP is equal to 127.0.0.1 (loopback). If the IP doesn't match it writes denied. <?php $file = fopen('text.txt'...
37
votes
4answers
9k views

How does IP address spoofing on the Internet work? Who can do it?

Someone recently told me that the NSA could impersonate pretty much anyone they want by using IP address spoofing on the Internet. But how would that work and to what extend is it true anyway? Could ...
8
votes
2answers
22k views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or "127....
4
votes
2answers
4k views

Is there a difference in security between an IP address white list and a domain white list with TLS?

It seems to me that an IP address white list relies on easily spoofed information, while a domain white list, if it forces TLS, at least, relies on the validity of the certificate systems. I may be ...
0
votes
1answer
664 views

Simulate a lot of different IP's hitting a website

This may sound like launching a DDOS, but I am testing out GEO-IP location on my applications. I need to gather some data, to check how my graphs look when there is a lot of data. Are there any tools ...
-1
votes
2answers
1k views

How risky is to to use external DNS servers? [closed]

My infrastructure doesn't have an internal DNS server, so I just forward any DNS request to external DNS servers by iptables rules. I wonder how risk that can be, and how easy is it to spoof DNS or ...
2
votes
1answer
270 views

How to perform an idle scan against a target using Nmap with a list of zombies? [closed]

I want to perform port scan against a target but the firewall at the target only allows traffic to the ports through certain IP address/machines. I tried to perform an idle scan in Nmap but it only ...
1
vote
1answer
1k views

How restrict is an Asp .Net Web App with ipSecurity enabled?

The IT department of my company refused to host an ASP .Net Web App on our intranet. For security reasons that would be the best solution. Right now I'm considering other options. One of those is to ...
4
votes
1answer
1k views

Spoofing LAN IP Address Traffic

To give as much detail as possible, I am doing a Pentest for a client that has quite a few "terminal systems" meaning that they are simply a box with a connection back to the main server. These ...
3
votes
1answer
132 views

What other attacks can be deployed using IP spoofing other than DoS(and DDoS) attacks ?

I want to know the other attacks which are associated with IP spoofing because, we're trying to implement Source Address Validation (SAVA) and wanted to where else can Source Address validation ...
2
votes
1answer
2k views

Wired Deauth-Like Attacks

[story] Good Evening Guys, I just got out of a lan house which uses a system named Geto (Geto Lan House Management System 4.0), and I was wondering if it is hackable. [/story] While searching for ...
4
votes
1answer
395 views

How to defend against a Spoofed-IP Blacklist DOS attack?

So I've implemented an IP Blacklist for the /login endpoint on my server. If any IP fails to login more than x number of attempts in x number of minutes the requesting IP is blacklisted for x number ...
2
votes
1answer
383 views

Spoofing IP address as being local over the Internet

I know it is trivial to spoof your IP address with UDP: simply change the value of the source address in the IP header and the recipient has no idea where the packet actually came from. My question ...
8
votes
3answers
4k views

IP Spoofing: How secure is to control access by user’s public IP address?

We have a few Windows server VMs hosted in Amazon cloud. Users need to enter account and password to RDP to the VMs. The VMs’ RDP EndPoint (IP+Port) is public to the internet. As an extra security ...
3
votes
4answers
2k views

Spoof another IP address in the same network,will the spoofing source get the response?

I have read some articles about IP spoofing. Briefly speaking, IP-spoofing means the attacker uses a fake IP address in the IP header, to pretend this IP packet is sent by another machine. The ...