d

Spoofing: The Complete Documentation

• This category contains 11 Papers
• The last paper was added on 2007-03-26 (YYYY-MM-DD)

DNS ID Hacking

Published on unknown, by ADM Crew, ©w00w00!.

Hi people you might be wondering what DNS ID Hacking (or Spoofing) is. DNS ID Hacking isn\’t a usual way of hacking/spoofing such jizz or any-erect. This method is based on a vulnerability on DNS Protocol. More brutal, the DNS ID hack/spoof is very efficient is very strong because there is no generation of DNS daemons that escapes from it (even WinNT!).

Everything you ever wanted to know about DNS Spoofing

Published on July 25, 1997, by Johannes Erdfelt, the-project.org.

There has been a lot of talk recently about DNS spoofing and how it's done and how to stop it. I've seen a lot of people who are mistaken in what they know about DNS spoofing. So I'm here to set everything straight along with solutions to COMPLETELY stop DNS spoofing. If you don't think DNS spoofing is stoppable, read on and read the entire thing before quoting/replying to anything.

Hyperlink Spoofing: An attack on SSL Server Authentication

Published on January 03, 1997, by Frank O'Dwyer, ©Rainbow Diamond Limited.

This document outlines an attack on the SSL (server) authentication protocol as implemented in 'secure' web browsers and servers such as those from Microsoft and Netscape. By following the steps below, a 'man-in-the-middle' attacker can persuade the browser to connect to a fake server, with the browser nonetheless presenting the usual appearances of a 'secure' session. The user may then be persuaded to reveal information such as credit card numbers, PINs, insurance or bank details, or other private information to the fake server. Another risk is that the user may download and run trojan Java applets (e.g. banking or database clients) from the fake server, believing them to be from the real server and therefore safe. The details of the attack and some possible fixes are presented below.

Introduction to IP Spoofing

Published on November 21, 2000, by Victor Velasco, ©SANS Institute.

This paper describes the use of IP spoofing as a method of attacking a network in order to gain unauthorized access. The attack is based on the fact that Internet communication between distant computers is routinely handled by routers which find the best route by examining the destination address, but generally ignore the origination address. The origination address is only used by the destination machine when it responds back to the source.

IP Spoofing

Published on February 2001, by Kapil Sharma, ©Linux Gazette.

A spoofing attack involves forging one's source address. It is the act of using one machine to impersonate another. Most of the applications and tools in UNIX rely on the source IP address authentication. Many developers have used the host based access controls to secure their networks. Source IP address is a unique identifier but not a reliable one. It can easily be spoofed. To understand the spoofing process, First I will explain about the TCP and IP authentication process and then how an attacker can spoof you network.

IP Spoofing: An Introduction

Published on March 11, 2003, by Matthew Tanase, ©SecurityFocus.

Criminals have long employed the tactic of masking their true identity, from disguises to aliases to caller-id blocking. It should come as no surprise then, that criminals who conduct their nefarious activities on networks and computers should employ such techniques. IP spoofing is one of the most common forms of on-line camouflage. In IP spoofing, an attacker gains unauthorized access to a computer or a network by making it appear that a malicious message has come from a trusted machine by “spoofing” the IP address of that machine. In this article, we will examine the concepts of IP spoofing: why it is possible, how it works, what it is used for and how to defend against it.

IP Spoofing: Understanding the basics

Published on 2004-03-30, by Informer, ©Linux Exposed.

IP spoofing is the most exciting topic you will hear wannabe hackers talking about. It is also a subject about which no one knows much. Before we continue I would like to tell you that IP Spoofing is quite difficult to understand and a lot of people have trouble understanding how it is done. The other downside it has is the fact that it can almost not be done using a Windows system and a system administrator can easily protect his system from IP spoofing IP Spoofing is a trick played on servers to fool the target computer into thinking that it is receiving data from a source other than you. This in turn basically means to send data to a remote host so that it believes that the data is coming from a computer whose IP address is something other than yours. Let's take an example to make it clear.

IP-spoofing Demystified

Published on September 01, 1996, by daemon9, ©Phrack Magazine.

The purpose of this paper is to explain IP-spoofing to the masses. It assumes little more than a working knowledge of Unix and TCP/IP. Oh, and that yur not a moron... IP-spoofing is complex technical attack that is made up of several components. (In actuality, IP-spoofing is not the attack, but a step in the attack. The attack is actually trust-relationship exploitation. However, in this paper, IP-spoofing will refer to the whole attack.) In this paper, I will explain the attack in detail, including the relevant operating system and networking information.

Spoofing: An Overview of Some the Current Spoofing Threats

Published on July 01, 2001, by Neil B. Riser, ©SANS Institute.

Spoofing can take on many forms in the computer world, all of which involve some type fraudulent representation of information. There are a variety of methods and types of spoofing.

Technical details of the attack described by Markoff in NYT

Published on 1995-01-25, by Tsutomu Shimomura, ©San Diego Supercomputer Center.

There seems to be a lot of confusion about the IP address spoofing and connection hijacking attacks described by John Markoff\’s 1/23/95 NYT article, and CERT advisory CA-95:01.

Trusted Paths for Browsers: An Open-Source Solution to Web Spoofing

Published on February 04, 2002, by Zishuang (Eileen) Ye, ©Dartmouth College.

The purpose of this paper is to explain IP-spoofing to the masses. It assumes little more than a working knowledge of Unix and TCP/IP. Oh, and that yur not a moron... IP-spoofing is complex technical attack that is made up of several components. (In actuality, IP-spoofing is not the attack, but a step in the attack. The attack is actually trust-relationship exploitation. However, in this paper, IP-spoofing will refer to the whole attack.) In this paper, I will explain the attack in detail, including the relevant operating system and networking information.