Attacks tools to be implemented
- ARP cache poisoning + Man-in-the-middle attack
- Packet sniffing attack and sniff http/telnet passwords
- HTTP / TCP Session Hijacking attack
- DHCP starvation
- DHCP spoofing
- TCP SYN flood + DoS attack
- Ping of Death + Ping flood attack
- Port Scanning with OS information / version
- Dictionary attack and Known Password attack
- ICMP ping spoofing + ICMP redirect attack
- ICMP smurf attack
- ICMP Blind Connection-Reset + Blind throughput reduction attack against TCP
- IP spoofing attack + DoS attack
- TCP reset attack on Telnet
- TCP reset attack on video streaming
- Optimistic TCP ACK attack (streaming server)
- MAC table flooding attack (of the switch)
- DoS attack to the DNS server (using spoofed IP address)
- DNS cache poisoning + Phishing attack
- Wi-Fi password cracking attack
Note: You MUST program your OWN attack tool. You MUST NOT use any tool available in the Internet. It will be mostly C/C++ code. You must craft your own frame / packet / segment using your own code.
Each student of a group is responsible of one attack tool. Clearly mention this in the TOP SHEET of the design report and final report (the name and ID of the student who is responsible for specific attack tool)
Lab Reports
You should submit two lab reports. The report should cover the following sections:
ο· Design report (Deadline: 13th Week)
- Definition of the attack with topology diagram
- Timing diagram of the original protocol and your attack timing diagram with attack
strategies
- Packet / Frame details for your attack and any modification in the header or so.
- Justification: why you think your design should work.
ο· Final report & Implementation demo (14th and 15th week)
- Steps of attacks, snapshots, victim screen, etc.
- Is your attack successful? Why do you think it was successful? Why not?
- Observed output in attacker PC, victim PC, and other related PC (server, client, etc.)
- Did you design any countermeasure for such an attack? How?
