This module will be talking about the steps that can be
taken to hijack an existing connection.
For this, we will be using both Python and Scapy.
The demonstration that we are going to be focusing on will utilize FTP.
The reason that this protocol was chosen is because it does
not use encrypted communications and has an easy‑to‑follow
and track command structure.
So why do you think you would need to know how to hijack a connection?
As we have discussed in the previous modules,
a primary part of a network security engineer's job at
Globomantics is keeping their systems secure.
Part of this is monitoring systems to see if they are under threat
actively or previously have and determining what can be done to
increase security should something be found.
Another part of the job is dealing with these attacks when they
are actively occurring and have been detected.
Sometimes systems are already in place that will allow you,
as a network security engineer,
to log into a GUI and simply initiate a block of the offending traffic.
Other times,
these tolls aren't in place or quickly accessible
and another solution is required.
In the following section,
we will be moving back into the demonstration environment and showing
how you can use Python and Scapy to interrupt an FTP session and
disconnect it when a specific trigger is found.
This idea can, of course,
be extended to any networking protocol as long as you are
able to find a trigger to work from.
Remember that even encrypted traffic still often uses IP and
some other clear text protocol in their transport that allows
you to control their behavior.
So now with this reviewed,
let's move into the demonstration environment and show how we
can implement the hijacking of a session.