Exam 312-50v13 topic 1 question 209 discussion

Here the keyword is "reset" and answer is RST hijacking

" a guessed acknowledgment number" mean it is a blind hijacking The attacker spoofed the source IP (making it “blind” to the victim’s actual traffic) and guessed the acknowledgment number to send an RST packet. This matches the definition of blind hijacking, where the attacker disrupts or injects data without direct visibility into the session.

C. RST Hijacking This is a form of TCP session hijacking where the attacker sends a forged TCP RST (reset) packet to one or both ends of a connection, spoofing the IP and guessing the sequence/ack number to terminate the connection.

RST hijacking is an attack technique where an attacker injects a forged TCP Reset (RST) packet into an active session. This attack is effective because TCP connections rely on sequence and acknowledgment numbers for maintaining session integrity. In this scenario: - The attacker spoofed the source IP address to match one of the communicating parties. - The attacker guessed the acknowledgment number to make the injected RST packet appear legitimate. - As a result, the victim's connection was forcibly reset and terminated. This aligns precisely with RST hijacking, making it the most appropriate answer.