IP-spoofing and Source Routing Connections with Linux 2.0.X

Architecture and Background

Ian Vitek - IP-spoofing and source routing connections with Linux 2.0.X IP-spoofing and source routing connections with Linux 2.0.X The speech will discuss hacking firewalls and filtering routers by spoofing IP and MAC-addresses. Two different spoofing techniques will be presented.

Vulnerability Analysis

Ian will first talk about what to eavesdrop (with siphon, dsniff and tcpdump) and what kind of information one will need for these examples to work. Secondly Ian will show how to set up a working source route (full connection) with netcat through a filtering router.

Exploitation and Demonstrations

Then Ian will show how to set up the network on a Linux to be able to IP-spoof (with full connection) through a firewall if you sit on a untrusted network, U, between a trusted network, A, and the server, S. Both examples will be explained step by step.

Remediation and Defensive Strategies

Ian Vitek works as a full time penetration tester at Infosec, Sweden (The page is in swedish). He is right now researching within Media Access level security and LDAP security (which is a big unexplored hole). He also thinks that modems are underestimated hacker tools.