miscProhard

unbefleckte_empfangnis

hxp_39c3

Task: establish a TCP connection to a service that blocks all SYN packets. Solution: brute-force SYN cookies by sending ACK packets with random sequence numbers, exploiting the modified MAX_SYNCOOKIE_AGE (1111 > 255) which makes the 8-bit age check always pass.

$ ls tags/ techniques/
brute_forceiptablesnetworktcpsyn_cookieskernel_exploitationraw_socketslinux_kerneltcp_handshakevirgin_birth
SYN cookie validation bypass via MAX_SYNCOOKIE_AGE overflowTCP ACK brute-force with random sequence numbersRaw socket packet craftingRST packet blocking to maintain connection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups