论文部分内容阅读
本文从协议欺骗的角度,讨论了在内网中进行网络渗透的方法,研究了基于ARP欺骗的数据包替换技术,以替换WEB回复报文中的链接信息为例,分析了无漏洞渗透技术的原理。在此基础上,探讨了基于ARP欺骗的内网渗透的防范措施。
This paper discusses the method of network infiltration in intranet from the perspective of protocol deception and researches the packet substitution technology based on ARP spoofing to replace the link information in WEB reply packet as an example to analyze the vulnerability- principle. On this basis, it discusses the countermeasures to prevent intranet infiltration based on ARP spoofing.