Posted: Thu Nov 14, 2002 11:09 pm Post subject: Spoofing question.. [ Vhosts - BNC - PsyBNC ]
I was wondering if anyone could provide me with the *basic* theory behind spoofing hostname while on IRC.
bubba @ dhcp-0009.someisp.com - normal
bubba @ runs.from.the.cops.com - spoofed
*I think* (please correct/add/subtract) it involves a personal (or hacked) DNS server and a valid domain name. When the IRC requests the information from the DNS server, it simply dumps fake information which in turn is processed as legit information.
Joined: 18 Apr 2002 Posts: 16777215 Location: Kuala Lumpur, Malaysia
Posted: Thu Nov 14, 2002 11:21 pm Post subject:
Hiya whichway, welcome aboard.
I'm afraid it sounds like whoever you've been listening to has been feeding you bullshit.
You are way off track.
It's totally legal and if some using a host like that has told you some shit like that they are lying and trying to look like they h4x0red a name server *cough bullshit*
Basically they are just using a BNC (bouncer) or PsyBNC (known sometimes as datapipes) which means you connect to IRC via another machine, therefore IRC shows the host you connect to rather than your own.
To get a funky name like i.spank.the.ircops.com you just buy a shell (about $5 a month nowdays) and use that.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
Looking for more Windows Networking info?
Sign up to the WindowsNetworking.com Monthly Newsletter, written by Enterprise Security MVP Deb Shinder, containing news, the hottest tips, Networking links of the month and much more. Subscribe today and don't miss a thing! View a sample newsletter.
Become a WindowsNetworking.com member!
Discuss your Windows Networking issues with thousands of other Windows Newtorking experts. Click here to join!