• Download "PART I : Simple Spoofing (Non Blind)"
• Download "PART II: Advanced spoofing (Blind)"

• 0. Introduction
  • 0.1 What
  • 0.2 For whom
  • 0.3 Disclaimer
  • 0.4 Licence
• 1. Short explanation of some words
• 2. Description of sourcecode
  • 2.1 Source included
  • 2.2 Programmer notes
• 3. TCP/IP (UDP) in an hazelnutshell
• 4. Non-blind spoofing
  • 4.1 Know what you are doing
  • 4.2 SYN flooding
  • 4.3 Connection Killing
    • 4.3.1 Using reset (RST)
    • 4.3.2 Closing a connection (FIN)
    • 4.3.3 Improving
  • 4.4 Connection Hijacking
  • 4.5 Other
• 5. The source code (remark added)

• 0. Introduction
  • 0.1 What
  • 0.2 For whom
  • 0.3 Disclaimer
  • 0.4 Licence
• 1. Description of source code
• 2. General information
  • 2.1 Source Routed IP
  • 2.2 Rerouting
• 3. Blind spoofing
  • 3.1 Sequence number generation
    • 3.1.1 Situation of the problem
    • 3.1.2 Sequence number generation
      • 3.1.2.a The old 64K rule
      • 3.1.2.b Time related generation
      • 3.1.2.c The 'pain in the ass' generation
  • 3.2 Sequence number prediction
    • 3.2.a 64K rule
    • 3.2.b Time relation
  • 3.3 The attack
    • 3.3.1 Connection initiation
      • 3.3.1.a 64K rule
      • 3.3.1.b Time relation
    • 3.3.2 Sending the data
    • 3.3.3 The attack
    • 3.3.4 Full log
    • 3.3.5 Detection, and avoiding it
      • 3.3.5.a Probes
      • 3.3.5.b RST packets
      • 3.3.5.c The ACK guesses
      • 3.3.5.d Retransmission
• 4. How to use the source code
  • 4.1 SEQ-scan
  • 4.2 Eriu
  • 4.3 Improvements
• Appendix: Short note about rlogin
• Appendix: Source Code

As always I appreciate any comment, remark, correction, thought or addition.
Money too...... ;)