![\"\"](\"http:\/\/3.bp.blogspot.com\/_Hu1rpxRsqcU\/Sx_sRHbp2rI\/AAAAAAAAAb4\/ToGUvNCsHZ4\/s1600-h\/bd_addr-spoofing.jpg\")
<\/a>Let’s look at two different scenarios.<\/p>\n
Scenario #1<\/span> Attacker wants to spoof an arbitrary IP address and the attacker is not on the same subnet (broadcast domain) as the targeted IP address. Example: attacker is 1.2.3.4 and wishing to spoof 4.5.6.7<\/p>\n Scenario #2<\/span> Attacker wants to spoof an IP address of someone on his own subnet (broadcast domain). Example: attacker is 192.168.1.55 and wishing to spoof 192.168.1.58 (assuming subnet of 255.255.255.0)<\/p>\n Scenario #1<\/span><\/p>\n The attacker can create forged TCP packets and modifies the source IP address to be any value. One tool that can do this is HPING2<\/a>.<\/p>\n What can you do:<\/p>\n What can’t you do:<\/p>\n Scenario #2<\/span><\/p>\n The attacker can perform a variety of attacks to forge or take-over the IP address on the same subnet.<\/p>\n Attack Options:<\/p>\n What can you do:<\/p>\n What can’t you do:<\/p>\n Hope this is helpful. This is by no means an exhaustive list of attack techniques, but something to consider if your are using IP related controls within an application.<\/p>\n This is a guest post by Michael Coates, a senior application security consultant with extensive experience in application security, security code review and penetration assessments. He has conducted numerous security assessments for financial, enterprise and cellular customers world-wide. Talkback and comments are most welcome<\/p>\n Related posts If you are using any sort of IP based filtering within your application, then you need to evaluate how IP spoofing attacks affect your security controls. In order to make a fair evaluation you will need a basic understanding of IP spoofing attacks. Let’s look at two different scenarios. Scenario #1 Attacker wants to spoof […]<\/p>\n","protected":false},"author":5679,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-130233","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/5679"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=130233"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/130233\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=130233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=130233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=130233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
\n
\n
\n
\n
The original text is published on …Application Security…<\/a><\/p>\n
DHCP Security – The most overlooked service on the network<\/a>
Example – Bypassing WiFi MAC Address Restriction<\/a>
Obtaining a valid MAC address to bypass WiFi MAC Restriction<\/a><\/p>\n