is it possible to inject tcp packets in a tcp connection?

is it possible to inject tcp packets in a tcp connection?

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
is it possible to inject tcp packets in a tcp connection? all.junks@gmail.com 03-06-2007
Posted by all.junks@gmail.com on March 6, 2007, 6:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I'm wondering if I can inject packets into an already established tcp
connection.

at a specific moment,
I should be able to hold out-going packet and inject custom created
packet.
then I should be able to increment sequence numbers for all the
packets that i have hold and all subsequent outgoing packets.

I'm thinking of using libnet to inject packets.
but I'm not sure of how to make sure tcp sequence numbers are intact.

I'd prefer window platform for development.

Thanks in advance.


Posted by Volker Birk on March 7, 2007, 3:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> I'm wondering if I can inject packets into an already established tcp
> connection.
> at a specific moment,
> I should be able to hold out-going packet and inject custom created
> packet.
> then I should be able to increment sequence numbers for all the
> packets that i have hold and all subsequent outgoing packets.
> I'm thinking of using libnet to inject packets.
> but I'm not sure of how to make sure tcp sequence numbers are intact.

Hi,

it's much easier to do a MITM attack by implementing a TCP proxy. That
means, you're simulating Alice for Bob, and you're simulating Bob for
Alice, so that you have two TCP connections.

Yours,
VB.
--
"Pornography is an abstract phenomenon. It cannot exist without a medium
to propagate it, and it has very little (if anything at all) to do with sex."
Tina Lorenz
<https://events.congress.ccc.de/congress/2006/Fahrplan/events/1422.en.html>

Posted by Sebastian Gottschalk on March 7, 2007, 10:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
all.junks@gmail.com wrote:

> I'm thinking of using libnet to inject packets.
> but I'm not sure of how to make sure tcp sequence numbers are intact.
>
> I'd prefer window platform for development.

For Windows, you should rather look at WinPCap. The source code package
already ships with various examples of ARP spoofing, TCP packet generators
etc.

Similar ThreadsPosted
UDP packets are dropped by the PIX December 22, 2005, 4:57 pm
strange packets from 192.168.1.126 February 21, 2008, 12:54 pm
Suspicious Packets Using Yproxy August 3, 2004, 9:13 pm
Strange ICMP packets September 15, 2005, 10:53 pm
New type of ICMP packets October 26, 2005, 11:06 am
Should I block Fragmented IP Packets? November 19, 2005, 9:02 am
Allow ICMP packets through Firewall May 8, 2006, 2:18 pm
Stonegate: Spoofed packets February 19, 2007, 5:36 pm
Output packets on port 113 July 6, 2007, 4:58 am
Anything wrong with blocking "new" SYN/ACK packets? October 18, 2007, 10:26 pm

The site map in XML format XML site map

Contact Us | Privacy Policy