Comments on: My attempts with IP Spoofing

By: Gili Nachum

Gili Nachum — Tue, 26 Oct 2010 14:37:04 +0000

Plz see this:
http://www.javatuning.com/my-attempts-with-ip-spoofing-revisited/

By: hustnn

hustnn — Tue, 26 Oct 2010 13:45:40 +0000

Is the way filipe used successful？ I want to know how to implment it，can you mail me？

By: My attempts with IP Spoofing – Revisited « Java Tuning

My attempts with IP Spoofing – Revisited « Java Tuning — Wed, 22 Sep 2010 15:51:17 +0000

[...] upon a time (Jan 2009) I’ve written this post, basically saying that you’re not likely to be able to spoof IP address over the Internet. [...]

By: filipe

filipe — Sat, 18 Sep 2010 00:34:19 +0000

email me

By: Gili Nachum

Gili Nachum — Sat, 18 Sep 2010 00:28:59 +0000

No. Nothing at my end
Can you try to send from you’re real IP address so we’ll know there’s nothing else in the way?

By: filipe

filipe — Sat, 18 Sep 2010 00:10:46 +0000

sent..
21:51:42.696373 IP 100.101.102.103.508 > 79.176.44.124.12345: UDP, length 8
21:51:42.696509 IP 100.101.102.103.871 > 79.176.44.124.12345: UDP, length 8
21:51:42.696658 IP 100.101.102.103.574 > 79.176.44.124.12345: UDP, length 8
21:51:42.696823 IP 100.101.102.103.769 > 79.176.44.124.12345: UDP, length 8
21:51:42.696978 IP 100.101.102.103.638 > 79.176.44.124.12345: UDP, length 8
21:51:42.697138 IP 100.101.102.103.663 > 79.176.44.124.12345: UDP, length 8
21:51:42.697284 IP 100.101.102.103.490 > 79.176.44.124.12345: UDP, length 8
21:51:42.697424 IP 100.101.102.103.732 > 79.176.44.124.12345: UDP, length 8
21:51:42.697575 IP 100.101.102.103.875 > 79.176.44.124.12345: UDP, length 8
21:51:42.697725 IP 100.101.102.103.918 > 79.176.44.124.12345: UDP, length 8
21:51:42.697875 IP 100.101.102.103.911 > 79.176.44.124.12345: UDP, length 8
21:51:42.698017 IP 100.101.102.103.56 > 79.176.44.124.12345: UDP, length 8
21:51:42.698168 IP 100.101.102.103.92 > 79.176.44.124.12345: UDP, length 8
21:51:42.698330 IP 100.101.102.103.554 > 79.176.44.124.12345: UDP, length 8

By: Gili Nachum

Gili Nachum — Sat, 18 Sep 2010 00:00:20 +0000

Thanks Mike,

Not sure what server is running which script exactly? Can you clarify?
The auto flags comes from the FireStat WordPress plug-in. Try it out.

By: Gili Nachum

Gili Nachum — Fri, 17 Sep 2010 23:57:40 +0000

@Fillipe: Cool! I accept the challenge!

I’ve enabled access logging for the next couple of days.
Can you try to send a UDP Packet from the imaginary source IP of: 100.101.102.103
To:
Dest IP: gilinachum.no-ip.org
Dest port: 12345

Let’s see what comes through…

By: Mike

Mike — Fri, 17 Sep 2010 23:35:43 +0000

BTW, i like the little icons showing the OS, country and browser.

By: Mike

Mike — Fri, 17 Sep 2010 23:34:15 +0000

I’m not a hacker but isn’t the fact that the server executes the script a security hole? :O