fabriziodemaria / mptcp-exploit Goto Github PK

I am having issues in replicating the attack with Kernel MPTCP version 0.90 (I used 0.89rc so far).
I am now trying to compile my own latest version of the Kernel and obtaining my own vmlinux file but the MPTCP doesn't open new subflows

The current implementation works only if the attack script is executed AFTER the MPTCP connection has been established

Mention the following in the final README document:

sudo iptables -I OUTPUT -p tcp --tcp-flags ALL RST,ACK -j DROP

Fix network specifications and improve "Limitations" part

The manipulated SYNACK packet to be sent to the client doesn't keep the port number that we configured and it is not recognized by the client. Use show2() to see the port difference once the packet is being reassembled.

Sometimes the hijack prints 100% but it fails anyway. It happens if the Server is sending the last messages before reaching 100%.

Apparently the current implementation doesn't trigger SYN/ACK packet back from the server.
Possible ways to solve the problem is to generate the SYN packet from scratch instead of manipulate the incoming packet (possible issue with Checksum generation involved)