White Scorpion
Nov 7 2004, 12:08 PM
hi all,
i'm looking for a tool, perhaps a firewall, that will allow you to alter the contents of the packages BEFORE Windows receives them or BEFORE they are sent out from the system.
it is kinda like a man in the middle attack, only then locally....
does someone know of such a tool?
Thanks in advance,
Kind regards,
AgentOrange
Nov 7 2004, 07:52 PM
I belive the only way to do this would be a MITM attack. You would have to trick the process into routeing thought your proxy server. You could do this by messing with your routing tables, there is a few other ways.... I know spammers use them, maybe someone else knows.
yuliang11
Nov 8 2004, 02:40 AM
i like to use ARP poisioning for this. We could intercept packets and modify it. In windows there's something like Cain & abel i bleieve that thing doesn't have something to modify the packets. I played with a linux version of ARP poisoning but i forgot the name of that thing , and linux version is capable of modifying packets

) cheers
White Scorpion
Nov 8 2004, 10:43 AM
thanks, but there is no need for ARP poisoning since i am trying to do this BEFORE the packets reach the network...
perhaps i need to learn more about how a firewall works and then write one for my self which has this ability