From: pire pire (pirepire69@romandie.com)
Date: Thu Dec 04 2003 - 04:54:18 EST
No I don't care about the return traffic! All I
need is to sen I GET request with a spoofed IP!
Example:
GET /toto.php?sessionId=123456&transfer=1000
Host: www.toto.com
I just need to send this request to the server
with the ip adress belonging to the sessionID
I've got throuh my XSS!
So how do you do that?
Thanks for your help
---------------------------------------
You can spoof any IP. The question is do you
want the return traffic.
-----Original Message-----
From: pire pire
[mailto:pirepire69@romandie.com]
Sent: Tuesday, December 02, 2003 5:02 PM
To: pen-test@securityfocus.com
Subject: Session & IP Spoofing
Hi,
I've found a vulnerability in a Web App which
gave me via an XSS the sessionID token.
I would like to replay this token. But the
session ID manager (on the server) seems to
look
also to IP adresses.
So my question is: Is there a way to spoof my
ip
address in order to replay the sessionID??
Like:
http://www.tutu.com/toto.php?
sessionid=32443243
and some how spoof of my IP?!
If I replay the sessionid from my machine or an
other machine behind my NAT (same outside IP)
it
works!!
Thanks a lot for your help
_______________________________________________
La messagerie gratuite des romands : 10 MO !!!
Profitez-en ! >>> http://www.romandie.com
---------------------------------------------------------------------------
----------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:43 EDT