Penetration Testing Bootcamp

Land attacks with hping3

Another test we can use with hping3 is to perform a land attack. A land attack is when you send a packet with the SRC and DST as the exact same IP address. This is an example of IP spoofing. The network infrastructure should be set up to deny spoofed packets. Using the best security practices, you should never have any traffic coming into your environment that has a SRC address of your IP space. This makes perfect sense, since by logic, traffic coming into your network shouldn't be coming from your network.

To test if spoofing is being allowed in your network, you can utilize hping3 to check this out. Here is the syntax that I will use for the land attack:

hping -V -c 100 -d 40 -S -p 139 -s 80 -k -a 192.168.1.129 ...