3 ms·
Would this attack require having control of a machine on the same local network? Otherwise how would you route that packet to the target machine?
by koolba 4y ago
Would this attack require having control of a machine on the same local network? Otherwise how would you route that packet to the target machine?
- infotogivenm 4y agoYes, I believe so, although you need “privileged network access” on the box - meaning you can craft random IP packets, not just “control” of the box. So on the LAN or otherwise in-path for the route for that subnet’s responses.
- jandrese 4y agoAren't you just crafting a packet to a 172.17.0.0/16 address on port 80? That requires no special permission whatsoever.
- infotogivenm 4y agoIf your compromised box has a route already for that subnet and machine yes. That would be odd though I think.
- jandrese 4y agoRight, you aren't going to send that packet over the Internet, and you'll only getting it through local routers that have the routes you need, which should not be common.
- sigg3 4y agoMight be common with IoT devices, cloud network equipment etc. :|
- ranger_danger 4y agoyes