|
-
April 16th, 2004, 02:29 PM
#6
Ms. M:
In effect, now that I think about it, this kind of application/device could be used as a DoS against a target if you trigger it to respond and spoof the source or create a worm that mimics a specific kind of attack. (Perhaps far out there concept but it is possible).
Not far out at all. Turning peoples automated defense systems against them is far from new. The simplest example is Mr. Cracker scanning my systems and realizing that at a certain threshold my firewall places a ban on all communication with him. OK, NP.... Use the same means as he did to get blocked but spoof the addresses of all the major search engines, microsoft, AV vendors and the firewall will block them too. You just DoSed the target. If all you intended to be was a pain in the a$$, (disgruntled employees for example), then you just had your fun.
Extending the concept to using the target's machines to attack another target is far from a huge leap.....
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|