Clever Use of the Registry to modify the TTL value to cheat hackers

Source: Internet
Author: User

When hackers attack other people's computers, the first thing they usually do is to determine whether the host is online. The method for judging is simple, that is, using the Ping command. The method is to enter "Ping IP Address" at the command prompt. If the returned information is "Reply from 221.231.114.219: bytes = 32 time = 23 ms TTL = 128 ", the host is on, that is, the other computer is in use.
Because the vulnerabilities and intrusion methods of different operating systems are different, hackers will also judge the operating system used by the other Party based on the information returned by the ping command. The result is the TTL value. Ba Ge Network (http://www.it8g.com) Remind everyone in general Windows 2000/XP Computer TTL value is 120, 128, and Unix/Linux system returned TTL value is 64 or 255. We all know that Unix/Linux vulnerabilities and intrusion methods are much more difficult than Windows, so we can modify the TTL value returned by the system to deceive hackers.

Run "regedit" and open registry editor. Select "HKEY_LOCAL_MACHINESystemCurrentControlSetServicesTcpipParameters" to create a "DefaultTTL" Dword key value, modify the value to "255" in decimal format or "FF" in hexadecimal format, and restart the computer to make the settings take effect.

Now, when the other party ping the computer again, it will return the incorrect TTL value, so that the other party may mistakenly think that the operating system used is Unix/Linux, thus achieving the same effect, let it go farther and farther on the wrong road.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.