• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Spoofing question.. [ Vhosts - BNC - PsyBNC ]

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Connectivity // Telecommunications // Internet News

View previous topic :: View next topic  
Author Message
whichway
Just Arrived
Just Arrived


Joined: 14 Nov 2002
Posts: 1


Offline

PostPosted: Thu Nov 14, 2002 11:09 pm    Post subject: Spoofing question.. [ Vhosts - BNC - PsyBNC ] Reply with quote

Hi all,

I was wondering if anyone could provide me with the *basic* theory behind spoofing hostname while on IRC.

Example..

bubba @ dhcp-0009.someisp.com - normal
bubba @ runs.from.the.cops.com - spoofed

*I think* (please correct/add/subtract) it involves a personal (or hacked) DNS server and a valid domain name. When the IRC requests the information from the DNS server, it simply dumps fake information which in turn is processed as legit information.

Thanks.
Back to top
View user's profile Send private message
ShaolinTiger
Forum Fanatic
Forum Fanatic


Joined: 18 Apr 2002
Posts: 16777215
Location: Kuala Lumpur, Malaysia

Offline

PostPosted: Thu Nov 14, 2002 11:21 pm    Post subject: Reply with quote

Hiya whichway, welcome aboard.

I'm afraid it sounds like whoever you've been listening to has been feeding you bullshit.

You are way off track.

It's totally legal and if some using a host like that has told you some shit like that they are lying and trying to look like they h4x0red a name server *cough bullshit*

Basically they are just using a BNC (bouncer) or PsyBNC (known sometimes as datapipes) which means you connect to IRC via another machine, therefore IRC shows the host you connect to rather than your own.

To get a funky name like i.spank.the.ircops.com you just buy a shell (about $5 a month nowdays) and use that.

BNC info found here: http://bnc.ircadmin.net/

PsyBNC here: http://www.netknowledgebase.com/tutorials/psybnc.html

The funky names are known as vhosts (virtual hosts) and are a subdomain, I used to use shaolin.ownz.joo.info, l33t eh?

Here are some companies vhost lists:

http://www.linuxshell.net/vhosts.txt

http://www.sparkhost.com/vhosts.html

You can find their prices on the pages.
Back to top
View user's profile Send private message Visit poster's website
chris
Forum Fanatic
Forum Fanatic


Joined: 18 Apr 2002
Posts: 16777201
Location: ~/security-forums

Offline

PostPosted: Fri Nov 15, 2002 11:35 am    Post subject: Reply with quote

Ive seen someone on irc using a nice owned BT subdomain, which was quite a good one,

totally.free.o8oo.bt.com


Smile
Back to top
View user's profile Send private message AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Connectivity // Telecommunications // Internet News All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Looking for more Windows Networking info?

Sign up to the WindowsNetworking.com Monthly Newsletter, written by Enterprise Security MVP Deb Shinder, containing news, the hottest tips, Networking links of the month and much more. Subscribe today and don't miss a thing!
View a sample newsletter.

Become a WindowsNetworking.com member!

Discuss your Windows Networking issues with thousands of other Windows Newtorking experts. Click here to join!

Community Area

Log in | Register

Readers' Choice

Which is your preferred data recovery solution?

Follow TechGenix on Twitter