Loading...

Messages

Proposals

Stuck in your homework and missing deadline? Get urgent help in $10/Page with 24 hours deadline

Get Urgent Writing Help In Your Essays, Assignments, Homeworks, Dissertation, Thesis Or Coursework & Achieve A+ Grades.

Privacy Guaranteed - 100% Plagiarism Free Writing - Free Turnitin Report - Professional And Experienced Writers - 24/7 Online Support

TCP/IP Attack Lab- SEED Labs Project

06/10/2020 Client: bingyanj Deadline: 10 Days

 In this lab, students need to conduct attacks on the TCP/IP protocols. They can use the Netwox tools and/or other tools in the attacks. All the attacks are performed on Linux operating systems. However, instructors can require students to also conduct the same attacks on other operating systems and compare the observations. To simplify the “guess” of TCP sequence numbers and source port numbers, we assume that attackers are on the same physical network as the victims. Therefore, you can use sniffer tools to get that information. The following is the list of attacks that need to be implemented. 3.1 Task 1 : SYN Flooding Attack ` ` User Server SYN SYN+ACK ACK Active TCP Connection ` ` Attacker Server SYN Spoofed Addresses SYN+ACK ` Legitimate User SYN No Reply Normal TCP 3-way handshake between user and server SYN Flood: attacker sends many SYN to server without ACK. The server is not able to process request from legitimate user 1 2 3 4 1 2 3 Figure 2: SYN Flooding Attack SEED Labs – TCP/IP Attack Lab 4 SYN flood is a form of DoS attack in which attackers send many SYN requests to a victim’s TCP port, but the attackers have no intention to finish the 3-way handshake procedure. Attackers either use spoofed IP address or do not continue the procedure. Through this attack, attackers can flood the victim’s queue that is used for half-opened connections, i.e. the connections that has finished SYN, SYN-ACK, but has not yet gotten a final ACK back. When this queue is full, the victim cannot take any more connection. Figure 2 illustrates the attack. The size of the queue has a system-wide setting. In Linux, we can check the setting using the following command: # sysctl -q net.ipv4.tcp_max_syn_backlog We can use command "netstat -na" to check the usage of the queue, i.e., the number of halfopened connection associated with a listening port. The state for such connections is SYN-RECV. If the 3-way handshake is finished, the state of the connections will be ESTABLISHED. In this task, you need to demonstrate the SYN flooding attack. You can use the Netwox tool to conduct the attack, and then use a sniffer tool to capture the attacking packets. While the attack is going on, run the "netstat -na" command on the victim machine, and compare the result with that before the attack. Please also describe how you know whether the attack is successful or not. The corresponding Netwox tool for this task is numbered 76. Here is a simple help screen for this tool. You can also type "netwox 76 --help" to get the help information. Listing 1: The usage of the Netwox Tool 76 Title: Synflood Usage: netwox 76 -i ip -p port [-s spoofip] Parameters: -i|--dst-ip ip destination IP address -p|--dst-port port destination port number -s|--spoofip spoofip IP spoof initialzation type SYN Cookie Countermeasure: If your attack seems unsuccessful, one thing that you can investigate is whether the SYN cookie mechanism is turned on. SYN cookie is a defense mechanism to counter the SYN flooding attack. The mechanism will kick in if the machine detects that it is under the SYN flooding attack. You can use the sysctl command to turn on/off the SYN cookie mechanism: # sysctl -a | grep cookie (Display the SYN cookie flag) # sysctl -w net.ipv4.tcp_syncookies=0 (turn off SYN cookie) # sysctl -w net.ipv4.tcp_syncookies=1 (turn on SYN cookie) Please run your attacks with the SYN cookie mechanism on and off, and compare the results. In your report, please describe why the SYN cookie can effectively protect the machine against the SYN flooding attack. If your instructor does not cover the mechanism in the lecture, you can find out how the SYN cookie mechanism works from the Internet. 3.2 Task 2 : TCP RST Attacks on telnet and ssh Connections The TCP RST Attack can terminate an established TCP connection between two victims. For example, if there is an established telnet connection (TCP) between two users A and B, attackers can spoof a RST packet from A to B, breaking this existing connection. To succeed in this attack, attackers need to correctly construct the TCP RST packet. SEED Labs – TCP/IP Attack Lab 5 In this task, you need to launch an TCP RST attack to break an existing telnet connection between A and B. After that, try the same attack on an ssh connection. Please describe your observations. To simplify the lab, we assume that the attacker and the victim are on the same LAN, i.e., the attacker can observe the TCP traffic between A and B. The corresponding Netwox tool for this task is numbered 78. Here is a simple help screen for this tool. You can also type "netwox 78 --help" to get the help information. Listing 2: The usage of the Netwox Tool 78 Title: Reset every TCP packet Usage: netwox 78 [-d device] [-f filter] [-s spoofip] Parameters: -d|--device device device name {Eth0} -f|--filter filter pcap filter -s|--spoofip spoofip IP spoof initialization type {linkbraw} 3.3 Task 3 : TCP RST Attacks on Video Streaming Applications Let us make the TCP RST attack more interesting by experimenting it on the applications that are widely used in nowadays. We choose the video streaming application in this task. For this task, you can choose a video streaming web site that you are familiar with (we will not name any specific web site here). Most of video sharing websites establish a TCP connection with the client for streaming the video content. The attacker’s goal is to disrupt the TCP session established between the victim and video streaming machine. To simplify the lab, we assume that the attacker and the victim are on the same LAN. In the following, we describe the common interaction between a user (the victim) and some video-streaming web site: • The victim browses for a video content in the video-streaming web site, and selects one of the videos for streaming. • Normally video contents are hosted by a different machine, where all the video contents are located. After the victim selects a video, a TCP session will be established between the victim machine and the content server for the video streaming. The victim can then view the video he/she has selected. Your task is to disrupt the video streaming by breaking the TCP connection between the victim and the content server. You can let the victim user browse the video-streaming site from another (virtual) machine or from the same (virtual) machine as the attacker. Please be noted that, to avoid liability issues, any attacking packets should be targeted at the victim machine (which is the machine run by yourself), not at the content server machine (which does not belong to you). 3.4 Task 4 : TCP Session Hijacking The objective of the TCP Session Hijacking attack is to hijack an existing TCP connection (session) between two victims by injecting malicious contents into this session. If this connection is a telnet session, attackers can inject malicious commands (e.g. deleting an important file) into this session, causing the victims to execute the malicious commands. Figure 3 depicts how the attack works. In this task, you need to demonstrate how you can hijack a telnet session between two computers. Your goal is to get the the telnet server to run a malicious command from you. For the simplicity of the task, we assume that the attacker and the victim are on the same LAN. SEED Labs – TCP/IP Attack Lab 6 Note: If you use Wireshark to observe the network traffic, you should be aware that when Wireshark displays the TCP sequence number, by default, it displays the relative sequence number, which equals to the actual sequence number minus the initial sequence number. If you want to see the actual sequence number in a packet, you need to right click the TCP section of the Wireshark output, and select "Protocol Preference". In the popup window, uncheck the "Relative Sequence Number and Window Scaling" option. The corresponding Netwox tool for this task is numbered 40. Here is part of the help screen for this tool. You can also type "netwox 40 --help" to get the full help information. You may also need to use Wireshark to find out the correct parameters for building the spoofed TCP packet. Listing 3: Part usage of netwox tool 40 Title: Spoof Ip4Tcp packet Usage: netwox 40 [-l ip] [-m ip] [-o port] [-p port] [-q uint32] [-B] Parameters: -l|--ip4-src ip IP4 src {10.0.2.6} -m|--ip4-dst ip IP4 dst {5.6.7.8} -o|--tcp-src port TCP src {1234} -p|--tcp-dst port TCP dst {80} -q|--tcp-seqnum uint32 TCP seqnum (rand if unset) {0} -H|--tcp-data mixed_data mixed data ` ` User Server ` Attacker Attacker hijacks the TCP session and sends “Z” to server on behalf of client Data: “A” Data: “Z” Seq No.: ? ACK 3-way Handshake Data: “B” ACK Sniffing Figure 3: TCP Session Hijacking Attack SEED Labs – TCP/IP Attack Lab 7 3.5 Task 5 : Creating Reverse Shell using TCP Session Hijacking When attackers are able to inject a command to the victim’s machine using TCP session hijacking, they are not interested in running one simple command on the victim machine; they are interested in running many commands. Obviously, running these commands all through TCP session hijacking is inconvenient. What attackers want to achieve is to use the attack to set up a back door, so they can use this back door to conveniently conduct further damages. A typical way to set up back doors is to run a reverse shell from the victim machine to give the attack the shell access to the victim machine. Reverse shell is a shell process running on a remote machine, connecting back to the attacker’s machine. This gives an attacker a convenient way to access a remote machine once it has been compromised. In the following, we will show how we can set up a reverse shell if we can directly run a command on the victim machine (i.e. the server machine). In the TCP session hijacking attack, attackers cannot directly run a command on the victim machine, so their jobs is to run a reverse-shell command through the session hijacking attack. In this task, students need to demonstrate that they can achieve this goal. 

Homework is Completed By:

Writer Writer Name Amount Client Comments & Rating
Instant Homework Helper

ONLINE

Instant Homework Helper

$36

She helped me in last minute in a very reasonable price. She is a lifesaver, I got A+ grade in my homework, I will surely hire her again for my next assignments, Thumbs Up!

Order & Get This Solution Within 3 Hours in $25/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 3 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 6 Hours in $20/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 6 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

Order & Get This Solution Within 12 Hours in $15/Page

Custom Original Solution And Get A+ Grades

  • 100% Plagiarism Free
  • Proper APA/MLA/Harvard Referencing
  • Delivery in 12 Hours After Placing Order
  • Free Turnitin Report
  • Unlimited Revisions
  • Privacy Guaranteed

6 writers have sent their proposals to do this homework:

Solution Provider
Peter O.
High Quality Assignments
Financial Hub
Study Master
Calculation Guru
Writer Writer Name Offer Chat
Solution Provider

ONLINE

Solution Provider

I am an experienced writer who will be able to create the quality articles/blogs that you require for your website. My work is compelling enough that I am immediately able to engage the interest of the reader. I do not need much in the way of assistance; all you have to do is give me a title or topic. I include embedded hyperlinks as a standard feature in all my articles/blogs. I can also use SEO keywords if provided without any extra cost. No matter what the topic is, your articles/blogs will be entertaining and immensely readable. I take immense pride in my professionalism and ghost-writing technique. Thank you,

$40 Chat With Writer
Peter O.

ONLINE

Peter O.

Hello, I can assist you in writing attractive and compelling content on ganja and its movement globally. I will provide with valuable, informative content that you will appreciate. The content will surely hit your target audience. I will provide you with the work that will be according to the needs of the targeted audience and Google’s requirement.

$40 Chat With Writer
High Quality Assignments

ONLINE

High Quality Assignments

With an extensive experience of over 10 years of writing and editing, I promise to meet or exceed your expectations. The days of automated, copied, plagiarized, and unethically optimized content are long gone. Today, you need engaging, well-researched, and optimized content that serves your SEO purpose and boosts your website ranking in the search engines. Not only this, you need EXCELLENT content that leaves a lasting impression on prospective customers and gives you an edge over the competition. This is exactly what I do.

$40 Chat With Writer
Financial Hub

ONLINE

Financial Hub

Hey, I have gone through your job posting and become very much interested in working with you.I can deliver professional content as per your requirements. I am a multi-skilled person with sound proficiency in the English language for being a native writer who worked on several similar projects of content writing and can deliver quality content to tight deadlines. I am available for both online and offline writing jobs with the promise of offering an incredibly responsive and supreme level of customer service. Thanks!

$40 Chat With Writer
Study Master

ONLINE

Study Master

I can manage this work as per your requirements. Lets discuss on chat about more details. I am an MBA writer with 5 years of experience and can deliver quality content even too Short Deadlines. I can write 3000 to 4000 words in a day. I will deliver A+ quality work without Plagiarism at less price and time. Lets discuss more over the chat. Thanks

$20 Chat With Writer
Calculation Guru

ONLINE

Calculation Guru

I see that your standard of work is to get content for articles. Well, you are in the right place because I am a professional content writer holding a PhD. in English, as well as having immense experience in writing articles for a vast variety of niches and category such as newest trends, health issues, entertainment, technology, etc and I will make sure your article has all the key pointers and relevant information, Pros, Cons and basically all the information that a perfect article needs with good research. Your article is guaranteed to be appealing, attractive, engaging, original and passed through Copyscape for the audience so once they start reading they keep asking for more and stay interested.

$40 Chat With Writer

Let our expert academic writers to help you in achieving a+ grades in your homework, assignment, quiz or exam.

Similar Homework Questions

Occupational therapy practice framework 3rd edition pdf - Year 3 french activities - Ernie dances to the didgeridoo youtube - Heating curve of water - Toys plus inc case study solution - The story of hour pdf - Nursing - Foxboro imt 20 manual - I need this assignment done which is due SATURDAY... I need someone who will get the job done.... - SLP--ACCOUNTING COST SYSTEMS AND COST BEHAVIOR - Needs and wants of ancient communities pdf - Chapter of a book apa - The globalization of eating disorders rhetorical analysis - Confusion between theological beliefs and ethical principles - LITERATURE - St vincent hospital hiring process - Mr owen sparrow neurosurgeon - What Should I Look for in a Reliable Thesis Editing Service? - Clock spring winder tool - Fall of humanity then and now worksheet - Dr john monagle pain management - How to make a poster in powerpoint - My chemistry lab answers - Hobbit essay 2 page - Babyliss paris ipro 235 intense protect - Penetration testing - Hamlet ghost scene analysis - IT PROJECT ANALYSIS AND PROPOSAL - How does novikov describe the united states - Radish seed germination lab results - Bsbrsk501 manage risk assessment - Sparknotes triangle the fire that changed america - Phase diagram freezing point - Discussion 2 - Training, New Information System, & Evaluation - Camphor in water experiment - Ocr multiple choice questions biology - What are the six dimensions of health - Television analysis essay - A circus performer stretches a tightrope - When does relative size not work as a depth cue - Article 1 - How to find the x component of a vector - Essay - Costco strategic group map - Spss descriptive statistics syntax - Sample 30 second tv commercial scripts - Graphing a heating curve for water lab answers - Haunted places logic problem answers - An integral part of six sigma is - Nca credo for ethical communication - Parts catcher m code fanuc - Dob in a tax cheat - Response - Infinity symbol ascii code - Ts eliot hsc poems - Cocolife accredited hospitals in cavite - Mission of accounting department - Name three meals of the day - Roald dahl family tree - Bachelor of behavioural neuroscience - What is an example of a folktale story - Evidence rules - Barthes from work to text summary - Nabha asx share price - Grade 7 math philippines - Software asset and configuration management - Bbc bitesize maths calculator - Debt for nature swap pros and cons - Mining - Chapter 6 jekyll and hyde - Plastimo 4 man valise liferaft - Australian institute of embalmers - Bus 475 week 2 quiz - Research Paper: COSO Framework - First palpable spinous process - Human resource management 11th edition john m ivancevich - Qualitative Research - Business Intelligence (Disc) - Capital budgeting quiz questions and answers - Politics defined by harold lasswell - What is the meaning of numerical coefficient - Telsyte australian smartphone & wearable devices market study 2019 2023 - Eve online odin synthetic eye - Due 10/4/2020 1000 words advance directive in healthcare - Wwnorton com studyspace give me liberty - ScamFighter - What value does jetblue create for its customers - Prepare a balance sheet in good form - Model for writers 12th edition pdf - Political Science Assignment Week 3 - Fix cut haul st joseph mo - Moorooka lions bicentennial picnic ground - The lions of little rock sparknotes - Read Chapter 4 and 5 and complete the review questions. - Blue ocean strategy pdf - Art history analysis paper - Ethical dilemas with the grading of the marine corps fitness test - Oo de lally banjo tab - Powerpoint module 1 concepts review answers