Results 1 to 9 of 9

Thread: MAC spoof concept

Threaded View

  1. #1
    Senior Member
    Join Date
    Dec 2004
    Posts
    140

    MAC spoof concept

    I have got these three PCs :

    PC1 source (victim) , and PC3 Destination (Target), PC2 attacker (imporsonate idintity of PC1)


    PC1 mac address is : 0000.ffff.aaaa
    PC2 mac address is : 0000.ffff.bbbb
    PC3 mac address is : 0000.ffff.cccc


    They are connected to cisco switch 3550

    The term MAC spoofing is the creation of frame with a forged (spoofed) source MAC address (our case 0000.ffff.aaaa ) with the purpose to conceal the identity of the sender (our case PC2) and impersonate the identity of PC1.

    If PC2 sends traffic to PC3 (Destination) , PC2 will try to masquerades as PC1 by falsifying its MAC address to be 0000.ffff.aaaa, if this the case what would the benefit be for PC2 (attacker), if all the traffic (as a response to initiated connection from PC2) coming back from PC3 go to PC1 instead of PC2 ?

    In this simple scenario I do not have DHCP server , I assigned ip address statically
    Last edited by zillah; April 11th, 2007 at 04:59 AM.

Similar Threads

  1. Windows ANI File Parsing Proof Of Concept (MS05-002)
    By STeRoiD in forum Microsoft Security Discussions
    Replies: 0
    Last Post: January 12th, 2005, 10:59 PM
  2. The Script-To-Macro Viral Concept
    By sain2rion in forum AntiVirus Discussions
    Replies: 2
    Last Post: January 3rd, 2005, 06:11 PM
  3. Spoof Attack
    By AngelicKnight in forum Firewall & Honeypot Discussions
    Replies: 6
    Last Post: May 5th, 2004, 04:50 PM
  4. Logs show spoof
    By the19man in forum Firewall & Honeypot Discussions
    Replies: 16
    Last Post: August 29th, 2003, 12:45 AM
  5. exploit)Apache & PHP Proof of Concept
    By E5C4P3 in forum Web Security
    Replies: 0
    Last Post: March 6th, 2002, 04:51 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •