The attacker then sends a packet full of SACK options designed to force the other host to scan that entire queue to process each option.
然后攻击者发送一个充满SACK选项的包，目的是使另一方主机扫描整个队列以处理每个选项。
To accomplish this, the attacker sends a TCP packet with the SYN flag set to the target host, just like when opening a regular TCP connection.
要实现这一点，攻击者向目标主机发送设置了SYN标志的tcp包，就象打开常规tCP连接时一样。
Let's further assume that host a is located in network 192.168.2.0, and that the attacker sends the datagram to the network broadcast address of this network instead of to a particular host.
让我们进一步假设主机a位于网络192.168.2.0，并且攻击者将该数据报发送到这个网络的网络广播地址而不是某台特定主机。
Knowing which ports are open on a host is an important first step for an attacker to deduce possible vulnerabilities to the target host.
知道主机上哪些端口是打开的，对于攻击者推断目标主机上可能存在的弱点是重要的第一步。
Memory space breach — Accomplished via stack overflow, buffer overrun, or heap error, enables execution of arbitrary code supplied by the attacker with the permissions of the host process.
内存空间缺口——通过栈溢出、缓冲区溢出或堆错误来实现，以宿主进程的权限执行攻击者提供的任何代码。
Knowing this, imagine that an attacker constructs an ICMP echo message containing the spoofed source address of some arbitrary Host a, such as 192.168.2.2, in its header.
知道了这一点，假设攻击者构造了一条IC MP回应消息，它的头中包含伪造的任意主机a的源地址，如192.168.2.2。
For example, if you host an online database application or e-commerce site, you can expect to be squarely in the sites of an attacker at some point.
例如，如果托管联机数据库应用程序或电子商务站点，则一定会成为攻击者的目标。
The ARP spoofing is one of the spoofing on the network, which allows an attacker to redirect the IP packets on a network segment of Ethernet so that he can get the trust of the target host.
ARP协议欺骗是网络欺骗行为之一，它使得攻击者可以重定向一个以太网段上的IP数据报以取得目标主机的信任。
By analyzing the networking character values actively and passively, attacker can get a lot of information about target host, such as the type of operating system.
基于主动、被动探测攻击目标并分析其数据报的网络特征值，可以得出攻击目标的操作系统类型等重要信息，进而得出与之相关的系统漏洞，为入侵和攻击提供重要依据。
By analyzing the networking character values actively and passively, attacker can get a lot of information about target host, such as the type of operating system.
基于主动、被动探测攻击目标并分析其数据报的网络特征值，可以得出攻击目标的操作系统类型等重要信息，进而得出与之相关的系统漏洞，为入侵和攻击提供重要依据。
应用推荐