|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Denial of service
Gigi Sullivan (sullivan
seclab.com)
Wed, 19 Aug 1998 17:48:06 +0200 (CEST)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
- Next message: Frank Willoughby: "Re: Shared DMZ liability"
- Previous message: Wood, Tom D: "Executives liable for computer crime?"
- Next in thread: HASSAN.KARIM
chase.com: "Re: Denial of service"
Hi there :)
Well, indeed DoS' attack were used in the past also to gain
access to a machine, not only to corrupt a service's work.
That involved also another exploitation (ie that DoS only couldn't lead to
nothing, but was foundamental).
Have you ever read Shimomura's paper about Mitnick's break ?
He simple show how a trust relationship, again with ip spoofing and
DoS (TCP SYN attack (also said by Bellovin many years ago "A Weakness in
the TCP/IP protocol suite) were used to ESTABILISH a "fake" (but "real")
login session.
Best regards,
-- gg sullivan
-- Lorenzo Cavallaro Intesis SECURITY LAB Phone: +39-2-671563.1 Via Settembrini, 35 Fax: +39-2-66981953 I-20124 Milano ITALY Email: sullivanseclab.com
On Tue, 18 Aug 1998, Pawel Maciejewski wrote:
> Date: Tue, 18 Aug 1998 13:08:04 +0200 (MET DST) > From: Pawel Maciejewski <lukey
hack.dk> > To: City <stryker
WPI.EDU> > Cc: firewall-wizards
nfr.net > Subject: Re: Denial of service > > > Denial of Service (called also DoS) is a type of attack which is used > not to gain acces to machine, but to corrupt it's work (hang, roboot etc) > > Examples : land, teardrop, boink, winnuke, latierra (modified latierra), > nestea, ping of death, smurf and many many more.. > > You can even use the fork() function to cause simply DoS attack > > Greets > > -= Signed =- > -= Pawel Maciejewski =- > -= e-mail : lukey
hack.dk IRC #hack, #hackpl, #hax =- > > >
- Next message: Frank Willoughby: "Re: Shared DMZ liability"
- Previous message: Wood, Tom D: "Executives liable for computer crime?"
- Next in thread: HASSAN.KARIM
chase.com: "Re: Denial of service"
This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:40 CDT