OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: spoofing the ethernet address
From: Simple Nomad (thegnomeNMRC.ORG)
Date: Wed Mar 01 2000 - 08:38:39 CST

Use libnet and link layer writing to the wire... this allows a lot of
control, and might work depending on your architecture. Also look around
on the L0pht's web site as Kingpin wrote a paper that I believe covered
the subject.

- Simple Nomad - No rest for the Wicca'd -
- thegnomenmrc.org - www.nmrc.org -
- thegnomerazor.bindview.com - razor.bindview.com -

On Tue, 29 Feb 2000, Bobby, Paul wrote:

> Been playing with hping, and I imagine other IP spoofing tools generate the
> same types of packets.
>
> The spoofed packet contains a bogus IP address, yes. However the ethernet
> address (MAC) is the address of the sending machine.
>
> Is it possible to spoof this address also? Would someone have to write a
> custom ethernet driver?
>
> Paul Bobby
> -----------------
> <dream> Got Root? </dream>
>