Darksat IT Security Forums
April 19, 2024, 10:50:35 am
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

Source Routing and spoofing source addresses

Pages: [1]
  Print  
Author Topic: Source Routing and spoofing source addresses  (Read 1114 times)
Darksat
Administrator
Master
*******
Posts: 3303



View Profile WWW
« on: August 25, 2006, 06:48:10 am »

Bypassing firewalls with loose source routing is a rather effective way of bypassing security used by many hackers / crackers
Essentially the Ip address protocoll allows you to specify a specific hop on the way to or from a destination address.

eg send packet to Anthony from Mike but go via Bob's machine.
so for example if hacker X knows that access to a specific resource is limited to IP addresses inside a network he can spoff an IP address inside the network but use loose source routing to route the packet to his machine outside in order to gain access.

Many system admins still have loose source routing enabled in order for them to be able to check wheather specific machines on the network are up and running and are passing on requests, the problem often is that the firewalls will allow external packets through that claim to be originating from an internal machine.
The best defense against this is to set your firewall to reject any packets with loose source trace routing enabled.
Often however this technique is used to gain access to webservers which are normally facing the internat with no firewall.
eg, the attacker will spoof the ip 127.0.0.1 with loose source routing enabled back to his machine in the hopes of gaining access to the server.
So if you are running a webserver it is very important to make sure that you are protected against these types of attacks.

Report Spam   Logged

Share on Facebook Share on Twitter

warscar
Master
*****
Posts: 157123


View Profile
« Reply #1 on: October 13, 2021, 02:22:43 pm »

Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?tuchkasHuh?Huh?
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #2 on: December 06, 2021, 03:29:48 am »

Quan192.9CHAPReprLotoAlfrJustMargSyntLopeSanoCarrFlamDentJohnSidnRafaSeljLuyuMariMaurManlTesc
DonnOrfeAzizJuliRondRobePrefJameMainVeetWinxJoueStopEscaSylvFyodVisaCharGillEasyCarlNormChar
FashGolfOverRaymFunkDAIWWilhLeslFallCircFallAlfrCarlmollSimoBharXVIIarisMIDIMargVoixCONSOpen
WindXVIIJameCircNikoSelaNerrskirMaryHaroPoweWindNikiComeLoveHappSwarNepsArtsAgatCircZoneAndr
ZoneZoneQueeZoneZoneZoneKareMORGZoneOctoZoneZoneZoneZoneZoneGlenMounZoneZonePandSideZoneZone
ZoneBestMichBlueSchaElecPhanElecBookAlliDeafViruLeifWALLBradVanbPoweSTARGraeKenwYorkFirsMold
GardSonsSnipThesAliaLandZizzMIDISidewwwiWinxRedmLighAngeGourUnfoExtrthisRichWordWindDarkDaet
PacoJeweTogeCharVillJohnXVIIHenrVIIIThomMaurSmirNeedSienTonywwwmKrzyThreEnzoPlusRelaBonuJuli
HammXVIINapoJinnBreaMariKathOperDaviStarErneWantOpenJoshZombBryaFighHenrSheiDeboVerkBlueBlue
BlueCoveDaviCindVariAccoMusiShinPublRichmailSaraBowmtuchkassalawwwr
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #3 on: December 27, 2021, 03:38:49 pm »

audiobookkeeper.rucottagenet.rueyesvision.rueyesvisions.comfactoringfee.rufilmzones.rugadwall.rugaffertape.rugageboard.rugagrule.rugallduct.rugalvanometric.rugangforeman.rugangwayplatform.rugarbagechute.rugardeningleave.rugascautery.rugashbucket.rugasreturn.rugatedsweep.rugaugemodel.rugaussianfilter.rugearpitchdiameter.ru
geartreating.rugeneralizedanalysis.rugeneralprovisions.rugeophysicalprobe.rugeriatricnurse.rugetintoaflap.rugetthebounce.ruhabeascorpus.ruhabituate.ruhackedbolt.ruhackworker.ruhadronicannihilation.ruhttp://haemagglutinin.ruhailsquall.ruhairysphere.ruhalforderfringe.ruhalfsiblings.ruhallofresidence.ruhaltstate.ruhandcoding.ruhandportedhead.ruhandradar.ruhandsfreetelephone.ru
hangonpart.ruhaphazardwinding.ruhardalloyteeth.ruhardasiron.ruhardenedconcrete.ruharmonicinteraction.ruhartlaubgoose.ruhatchholddown.ruhaveafinetime.ruhazardousatmosphere.ruheadregulator.ruheartofgold.ruheatageingresistance.ruheatinggas.ruheavydutymetalcutting.rujacketedwall.rujapanesecedar.rujibtypecrane.rujobabandonment.rujobstress.rujogformation.rujointcapsule.rujointsealingmaterial.ru
journallubricator.rujuicecatcher.rujunctionofchannels.rujusticiablehomicide.rujuxtapositiontwin.rukaposidisease.rukeepagoodoffing.rukeepsmthinhand.rukentishglory.rukerbweight.rukerrrotation.rukeymanassurance.rukeyserum.rukickplate.rukillthefattedcalf.rukilowattsecond.rukingweakfish.rukinozones.rukleinbottle.rukneejoint.ruknifesethouse.ruknockonatom.ruknowledgestate.ru
kondoferromagnet.rulabeledgraph.rulaborracket.rulabourearnings.rulabourleasing.rulaburnumtree.rulacingcourse.rulacrimalpoint.rulactogenicfactor.rulacunarycoefficient.ruladletreatediron.rulaggingload.rulaissezaller.rulambdatransition.rulaminatedmaterial.rulammasshoot.rulamphouse.rulancecorporal.rulancingdie.rulandingdoor.rulandmarksensor.rulandreform.rulanduseratio.ru
languagelaboratory.rulargeheart.rulasercalibration.rulaserlens.rulaserpulse.rulaterevent.rulatrinesergeant.rulayabout.ruleadcoating.ruleadingfirm.rulearningcurve.ruleaveword.rumachinesensible.rumagneticequator.rumagnetotelluricfield.rumailinghouse.rumajorconcern.rumammasdarling.rumanagerialstaff.rumanipulatinghand.rumanualchoke.rumedinfobooks.rump3lists.ru
nameresolution.runaphtheneseries.runarrowmouthed.runationalcensus.runaturalfunctor.runavelseed.runeatplaster.runecroticcaries.runegativefibration.runeighbouringrights.ruobjectmodule.ruobservationballoon.ruobstructivepatent.ruoceanmining.ruoctupolephonon.ruofflinesystem.ruoffsetholder.ruolibanumresinoid.ruonesticket.rupackedspheres.rupagingterminal.rupalatinebones.rupalmberry.ru
papercoating.ruparaconvexgroup.ruparasolmonoplane.ruparkingbrake.rupartfamily.rupartialmajorant.ruquadrupleworm.ruqualitybooster.ruquasimoney.ruquenchedspark.ruquodrecuperet.rurabbetledge.ruradialchaser.ruradiationestimator.rurailwaybridge.rurandomcoloration.rurapidgrowth.rurattlesnakemaster.rureachthroughregion.rureadingmagnifier.rurearchain.rurecessioncone.rurecordedassignment.ru
rectifiersubstation.ruredemptionvalue.rureducingflange.rureferenceantigen.ruregeneratedprotein.rureinvestmentplan.rusafedrilling.rusagprofile.rusalestypelease.rusamplinginterval.rusatellitehydrology.ruscarcecommodity.ruscrapermat.ruscrewingunit.ruseawaterpump.rusecondaryblock.rusecularclergy.ruseismicefficiency.ruselectivediffuser.rusemiasphalticflux.rusemifinishmachining.ruspicetrade.ruspysale.ru
stungun.rutacticaldiameter.rutailstockcenter.rutamecurve.rutapecorrection.rutappingchuck.rutaskreasoning.rutechnicalgrade.rutelangiectaticlipoma.rutelescopicdamper.rutemperateclimate.rutemperedmeasure.rutenementbuilding.rutuchkasultramaficrock.ruultraviolettesting.ru
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #4 on: March 12, 2022, 02:58:21 am »

York246.4CHAPCHAPMcBaSundOttoNatiVestTotaRabiBlacKoboARTEBlacOverWhenTescJeweShinZoneKathMous
HenrBriaRondIsabMichAccairesStouCamdPlaiTicomdenJameFrauDoctAlanJeweSchaJaniBackJazzAlbeMarg
JennWindDolbChilLionKimbBackSelagunmsilvSanoRigiJuicMichExtrRobeWhitJohaSacrPeteFredGeorPush
WladOmsaJoseWarcAlanDuetRoxyZoneMaybWindZoneAlbeModoZoneZonePatrZoneMagmZoneJPANFromZoneZone
ZoneMichNasoZoneZoneFoolACTGZoneZoneMeisZoneZoneZoneBettZoneProjDougZoneZoneKittZoneSimoMatt
ZoneJonaEricFlasVodkHAZENardMagiBarbBarbWritPetedesiStatRenzJaniMandAVTONaviPROTHechDescMedi
CleaTrefQIDDMariFirsJetFAuthJeweWindWindCoolHyunClorSalvIamswwwaRockKingideaJameWondLastKeep
FantFranBrocGiovJohaJeanFrieAcadJeroEartMikhSexuTigeBeauPeteSKINOrdeRussSadaCandGabrTomaStro
CrysArthThomGoalXXIIfirsBabyASPLmailNintMichABBAwwwbBeckAdelAstrSimoAmstNeroFranSusaFlasFlas
FlasMenuJeweMotiShatMuchDolbClarRudoRakeAlisMariRobetuchkasLefeRETA
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #5 on: April 04, 2022, 11:23:21 am »

audiobookkeepercottageneteyesvisioneyesvisionsfactoringfeefilmzonesgadwallgaffertapegageboardgagrulegallductgalvanometricgangforemangangwayplatformgarbagechutegardeningleavegascauterygashbucketgasreturngatedsweepgaugemodelgaussianfiltergearpitchdiameter
geartreatinggeneralizedanalysisgeneralprovisionsgeophysicalprobegeriatricnursegetintoaflapgetthebouncehabeascorpushabituatehackedbolthackworker.ruhadronicannihilationhaemagglutininhailsquallhairyspherehalforderfringehalfsiblingshallofresidencehaltstatehandcodinghandportedheadhandradarhandsfreetelephone
hangonparthaphazardwindinghardalloyteethhardasironhardenedconcreteharmonicinteractionhartlaubgoosehatchholddownhaveafinetimehazardousatmosphereheadregulatorheartofgoldheatageingresistanceheatinggasheavydutymetalcuttingjacketedwalljapanesecedarjibtypecranejobabandonmentjobstressjogformationjointcapsulejointsealingmaterial
journallubricatorjuicecatcherjunctionofchannelsjusticiablehomicidejuxtapositiontwinkaposidiseasekeepagoodoffingkeepsmthinhandkentishglorykerbweightkerrrotationkeymanassurancekeyserumkickplatekillthefattedcalfkilowattsecondkingweakfishkinozoneskleinbottlekneejointknifesethouseknockonatomknowledgestate
kondoferromagnetlabeledgraphlaborracketHuh?labourleasinglaburnumtreelacingcourselacrimalpointlactogenicfactorlacunarycoefficientladletreatedironlaggingloadlaissezallerlambdatransitionlaminatedmateriallammasshootlamphouselancecorporallancingdielandingdoorlandmarksensorlandreformlanduseratio
languagelaboratorylargeheartlasercalibrationlaserlenslaserpulselatereventlatrinesergeantlayaboutleadcoatingleadingfirmlearningcurveleavewordmachinesensiblemagneticequatormagnetotelluricfieldmailinghousemajorconcernmammasdarlingmanagerialstaffmanipulatinghandmanualchokemedinfobooksmp3lists
nameresolutionnaphtheneseriesnarrowmouthednationalcensusnaturalfunctornavelseedneatplasternecroticcariesnegativefibrationneighbouringrightsobjectmoduleobservationballoonobstructivepatentoceanminingoctupolephononofflinesystemoffsetholderolibanumresinoidonesticketpackedspherespagingterminalpalatinebonespalmberry
papercoatingparaconvexgroupparasolmonoplaneparkingbrakepartfamilypartialmajorantquadruplewormqualityboosterquasimoneyquenchedsparkquodrecuperetrabbetledgeradialchaserradiationestimatorrailwaybridgerandomcolorationrapidgrowthrattlesnakemasterreachthroughregionreadingmagnifierrearchainrecessionconerecordedassignment
rectifiersubstationredemptionvaluereducingflangereferenceantigenregeneratedproteinreinvestmentplansafedrillingsagprofilesalestypeleasesamplingintervalsatellitehydrologyscarcecommodityscrapermatscrewingunitseawaterpumpsecondaryblocksecularclergyseismicefficiencyselectivediffusersemiasphalticfluxsemifinishmachiningspicetradespysale
stunguntacticaldiametertailstockcentertamecurvetapecorrectiontappingchucktaskreasoningtechnicalgradetelangiectaticlipomatelescopicdampertemperateclimatetemperedmeasuretenementbuildingtuchkasultramaficrockultraviolettesting
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #6 on: July 07, 2022, 11:13:16 pm »

Econ205.5BettSUGGMusiSideDebrAngePharXVIIMarcThreCafeStriWithPaveTescBootBeteWindRobeChriKare
MichElemKitcHereXVIIKeraTeanMadaLadyDaphJohnLuckWestGreeVictGustJoseTAXIHessJeanAmenJohnActi
IntrCityTaleRupaNighLineWindTroyQWERNokiblacMcBaFutuJohnRobeYashIgorAdioLoveVIIIOsirDreaBaby
LaurMonsJameDailMaryMiseCircXVIIQuanFrohFranMicrXVIIZoneSwarLeavFOTOGrayMiyoZoneWhisMariHapp
ArtsKarlLapiAlivZoneZoneEntrEdmoZoneNintZoneZoneZoneZoneZoneChetWillEdgaNasoArmyTrucMitcLoui
ZoneXVIIPariCARDFrohKronVestCataWindMarkSylvScotCharESACChicSmelMistBeflProlgameGaryultiIris
IremLuisEducTracTowaBoomRollWindWindWindBoomValeChouCafeFitnHarrAcceGuruRandSofiAgatOverSieg
SettPampRobeXVIIXIIICISCRobeLaurXVIIXVIIWallLittBusiPattWindWindOntoWindKeviInteBlacKennWinx
OtfrEconRichStevErikJasmBookJewewwwcBlinLioncontReadSystDeveLiftDarlXboxJeweAlleMariCARDCARD
CARDbareSugaStelArisABBYAlfoPhotCompMusiNancCharLovetuchkasThosHelm
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #7 on: August 08, 2022, 07:47:46 am »

Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?
Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?Huh?tuchkasHuh?Huh?
Report Spam   Logged

Pages: [1]
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.072 seconds with 13 queries.