GitHub - ewust/tcp_bf: Same-origin policy defeat attempt

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 98 Commits
html		html
spoof		spoof
Makefile		Makefile
README		README
WebSocketServerFactory.py		WebSocketServerFactory.py
bind_all.py		bind_all.py
http_spew.c		http_spew.c
inject.py		inject.py
logger.c		logger.c
logger.h		logger.h
server.c		server.c
syn_spew.c		syn_spew.c
tcp_spoof.c		tcp_spoof.c
tcp_spoof.h		tcp_spoof.h
test.sh		test.sh
ws_serv.py		ws_serv.py

Repository files navigation

TCP Brute Force
---------------

Attempt to break the same-origin policy using a brute force TCP attack.

Receive a few connections from a victim to learn upper 8 bits of sequence
number, and source port pattern (increment by 1, etc).

Then, have the victim make several connections to site (not attacker
controlled), and the rest should be obvious :)