spoofing

[HdkiLLeR]

Eiparxoun diaforoi tropoi na to petixeis auto(diafora attacks diladi).Estw oti exeis to target.server(poy einai o server poy theleis na pareis access) enw xereis oti o trusted.host(einai o host poy einai trusted apo ton target.server,i lista me toys trusted vriskete sto arxeio .rhosts).Tora epeidi o trusted.host einai trusted apo ton target.server borei na kanei login xwris password se diafores ipiresies,kiriws omos oles tis r* servises(rsh...),kai auto logo toy oti to authentication vasizete kirios ston elegxo toy source kai destination ip.I vasiki idea tora einai na kaneis ton diko soy host (px evil.host) na fenete san na itan o trusted.host.Pws tora borei na ginei auto?

Loipon arxika tha prepei na vgaleis ektos leitourgias gia ligo ton trusted.host (pio sigekrimena na kanei sinexeia drop ola ta paketa apo opoiondipote host ara kai apo ton target.server) auto borei na ginei me diafora desycronize attacks,syn-ack storms kai alla alla to pio diadedomeno einai to syn-flood attack opoy stelneis aitiseis gia sindeseis(syn) se kapoia port apo diaforetika ip's kai o server(trusted.host) stin sinexeia tha steilei pisw syn-acks se kathe mia tetoia ip i opoia omos den iparxei kai den prokeite na parei pisw apadisi.Opote o trusted.host vriskete se mia fasi na perimenei to ack apo to syn-ack poy esteile se kathe host poy toy ekane aitisi gia sindesi.Iparxei omos enas megistos arithmos aitisewn gia sindeseis poy boroun na ginoun(auto exei na kanei kirios me ton kernel,dioti denborei na anigei sindeseis ep-apeiron giati tha crasharei) kai ean xeperastei tote oles oi ipoloipes aitiseis gia sindesi i opoiodipote paketo erxete tah ginete drop.Sto mikro auto xroniko diastima poy o trusted.host den dexete alla paketa tha prepei na steleis paketa ston target.server me ta katalila data kai sto hearder toy TCP na vazeis tin ip toy trusted.host.O target.server tha dexete paketa me edoles klp kai tha ta kanei ack (ta paketa omos me to ack tha pigenoun ston target.host o opoios tha ta kanei drop me apotelesma o target.server na min to katalavenei oti den erxode apo auton) alla esy den tha to vlepeis auto,gi'auto kai autou toy eidos to spoofing onomazete kai blind.Ean katafereis na provlepeis kala ton ta ip-secuence numbers kai steileis kai ta paketa prin o trusted.host arxisei na dexete sindeseis tote to spoofing einai epitixes.Tora gia ergaleia kai pws akrivws tha to kaneis einai mia alli sizitisi i opoia den exei noima na ginei edw ta parapanw einai edelws animerotika kai en-geni to provlima auto to opoio vasizete kirios stin domi toy TCP adimetopizete(me to sosto config se routers, me tin xrisi firewalls alla kai me tin adikatastasi twn ipiresiwn r* apo adistoixes ipiresies poy xrisimopoioun allou eidous authentication...kai polla alla)---auta kai pisteuw na voithisa

[pyro]

thn idea gia to pws douleuei to jerw, alla pwskanw ton server na nomizei oti erxomai apo perioxh pou h0ele login?