full-disclosure - The best hacker ever !

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon May  2 17:09:08 2005
From: gboyce at badbelly.com (Gregory Boyce)
Subject: The best hacker ever !

On Mon, 2 May 2005, Zuxy Haiduc wrote:

> While most people know better than attacking 127.0.0.1, it's important
> to note that in some operating systems (Windows, and a few others, but
> normally not *nix), anything in 127.* is loopback.
>
> Its a lot easier to trick someone into attacking, say, 127.36.120.67,
> than 127.0.0.1.
>
> Just a thought.

127.36.120.67 works under Linux as well (tested on Ubuntu, Debian, Redhat 
and Gentoo with 2.2-2.6 kernels).