Trivendra's blog

Over the past few years TCP sequence number prediction attacks have become a real threat against unprotected networks, taking advantage of the inherent trust relationships present in many network installations.   TCP sequence number prediction attacks have most commonly been implemented by opening a series of connections to the target host, and attempting to predict the sequence number which will be used next.   Many operating systems have therefore, attempted to solve this problem by implementing a method of generating sequence numbers in unpredictable fashions.   This method does not solve the problem. This advisory introduces an alternative method of obtaining the initial sequence number from some common trusted services.   The attack presented here does not require the attacker to open multiple connections, or flood a port on the trusted host to complete the attack.   The only requirement is that source routed packets can be...

Guys,you may have seen Mr. Robot and remember the event when Fsociety use the DDoS as a calling card to lure Elliot into helping them take down E-Corp or you may have been struck in situation when you try to open a Website only to see a notification that Website is down. What is this? Yes, this is a DOS Attack. A denial of service (DoS) attack is an attack that clogs up so much memory on the target system that it can not serve it’s users, or it causes the target system to crash, reboot, or otherwise deny services to legitimate users.There are several different kinds of dos attack as discussed below:- 1) :- The ping of death attack sends oversized ICMP datagrams (encapsulated in IP packets) to the victim.The Ping command makes use of the ICMP echo request and echo reply messages and it’s commonly used to determine whether the remote host is alive. In a ping of death attack, however, ping causes the remote system to hang, reboot or crash. To do so the attacker uses, the ping ...