At 20:14 9.7.2002 +0200, tide wrote: >I think I once read something about taking over tcp connections on >phrack.org but couldn't find the 'phile' anymore. link, anyone? >Judging from the document I just mentioned, one can take over every >alive tcp connection. > >To just play man in the middle, have a look at >http://ettercap.sourceforge.net/ Excellent article you were referring to is "IP-spoofing Demystified" by daemon9/route/infinity, published in Phrack 48, File 14. http://www.phrack.com/show.php?p=48&a=14 I would recommend reading this article as it explains basics of IP spoofing, as well as connection hijacking. I can see other people already pasted lots of links to implementations. Best regards, Bojan Zdrnja
This archive was generated by hypermail 2b30 : Wed Jul 10 2002 - 11:55:55 PDT