Everyone, welcome back. Let's take a look at you
to be session hijacking. Yep years. They
looked at the difference between UDP and TCP protocol. So
unlike PCP is no correct connection orientation, in
such a way that we don't track back as
two. Three Co has been delivered. So, there is no need for any sequence number.
In this particular protocol.
So, what really makes you to be vulnerable? Is
that since there is no sequence of and shaking. So
the protocol itself will not use
multiple lessee, key iconic
numbers so that the attacker doesn't need to force
them all of these. Now, in this part of the demo,
it be taking, we look at a very basic example
of UDP connection. Now, tie gentle
So, let's assume that.
I see the connection was established.
So, we see that the connection was established and we were able to send the
messages.
Now, the tool that we are going to use currently is known
as Steppy or python. So
this is a python-based package, Android do that.
We'll be using
So once this particular library is
enabled, let's go ahead and create a normal IP
packet.
Now, let's go ahead and create an IP packet.
We're going to provide the destination IP.
So now we're bored. You also going to add the
source port.
And the source IP as well.
So, let's create the additional duty P protocol details.
We also need to specify the soul that you're trying to force. In.
This case, will be the victim Port that's being company.
So if we go back, we see that particular
Port, 638 680 support
that has been used by the victim. So
we need to add that as a source phone.
So let's create a piano.
We need to compile the packet that
could contain all the information of the IP along with
UTP details and the payload.
Just look at the packet that we have constructed.
So as we can, look at this, what you're trying to achieve like radiant
a packet was that we are trying to spoof as the
victim who's going to to the server. So hence a source IP
would be the victims, IP and the destination
would be the server. And we have also specified the
servers for that is opened and the current connection that
is being established from the victim. And the
payload that we are going to send this your hat.
Let's go ahead and send them back.
As we can see the packet was sent and we can see,
we have spooked a packet saying that
from the victim's open port and
the IP. We are able to send a
hijacking, the session video.
This is related to the scenario and
like TCP. The UDP protocol is
not going to wait for a handshake. So once a
so blind sensor request
to the server, now the Subways
go to bombard back with the responses. So in this project is
we can forge either the victim or the server by
using this particular knowledge.
That's it for this video. Thank you.