[SATLUG] MAC Address Spoofing

phn1x phnx.lists at gmail.com
Mon Dec 10 19:38:39 CST 2007


It sounded as though it was more or less someone trying to performa  DDOS
without the Distributed aspect.

#!/usr/bin/env ruby

target = ARGV[0]

1.upto(99) do |x|

system('nmap -P0 --spoof-mac 00:16:36:D6:6A:#{x} #{target}')


--Something like that


On Dec 10, 2007 3:52 PM, Brian Lewis <astro at astr0.org> wrote:

> Sounds like a spammer to me.
>
> Sent from my iPhone
>
> On Dec 10, 2007, at 3:49 PM, phn1x <phnx.lists at gmail.com> wrote:
>
> > What exactly is the purpose of this exercise
> >
> > On Dec 10, 2007 3:44 PM, Kase Saylor <h_oudini at hotmail.com> wrote:
> >
> >>
> >> I have an interesting problem. I would like to send out a bunch of
> >> UDP
> >> messages with spoofed IP addresses, but also with spoofed MAC
> >> addresses.
> >> I need to fool a switch into thinking that it is receiving a bunch of
> >> messages from a lot of machines (but without using a lot of
> >> machines).
> >> Anybody have any ideas on how to do this? Will I have to modify the
> >> NIC
> >> driver? Or perhaps there's somewhere else I can make this happen?
> >> Thanks
> >> for any help.
> >>
> >> -Kase
> >>
> >>
> >> _________________________________________________________________
> >> You keep typing, we keep giving. Download Messenger and join the i'm
> >> Initiative now.
> >> http://im.live.com/messenger/im/home/?source=TAGLM--
> >> _______________________________________________
> >> SATLUG mailing list
> >> SATLUG at satlug.org
> >> http://alamo.satlug.org/mailman/listinfo/satlug to unsubscribe
> >> Powered by Rackspace (www.rackspace.com)
> >>
> > --
> > _______________________________________________
> > SATLUG mailing list
> > SATLUG at satlug.org
> > http://alamo.satlug.org/mailman/listinfo/satlug to unsubscribe
> > Powered by Rackspace (www.rackspace.com)
> --
> _______________________________________________
> SATLUG mailing list
> SATLUG at satlug.org
> http://alamo.satlug.org/mailman/listinfo/satlug to unsubscribe
> Powered by Rackspace (www.rackspace.com)
>


More information about the SATLUG mailing list