Hi


Sorry if it`s in the wrong sections, maybe the moderators will move it right.
I`m new to the website and not much familiar. Anyways..\

I have a flash application that connect to a server via socket connection. NOT HTTP. So when the connection is established between the server an client, i want to be able to inject some packets of my own.
I have tried the WireShark and other sniffing and capture applications, non of them worked i sent the packets and the client or server doesn't seam to get them.

I also tought of another way: creating a application layer, that will intercep the client packets  modifies them internaly and then redirect them to sever, and vice-versa when the server send to client my application should intercept modify and then send the packets to client as they would be from  the server. But this doent work because the application doesnt use DNS to find the host and its direct IP connect. Is there a way to fool the client in connecting to my local machine? a fake IP or soemthing like that?

If the concept above doesn't work... is there really a way of injecting packets into an established socket connection between to machines? To fool the client to think he received it from the server?

People may be able to give you some more information if you can describe what you want to do with the packets between the client and the server.  If you are trying to get the server to do something it isn't supposed to, if you can determine the protocol that is being used, it may be easier to write your own basic client outside of flash.  If you are needing to only change one type of packet, you may be able to do a man-in-the-middle type attack where you intercept the whole conversation and act as a relay between the client and server, and write automated modifications of the packets that you specifically want modified. 

Would I be right in saying you do not have access to the server AND the client?

I only wish to reiterate the fact that this site is meant for security professionals, ethical hackers, pen testers, etc. Not only access is needed but also permission. These are 2 very different things. And it appears as though you may not have either.

Kudos to the EH-Net Members who consistantly remind new contributors of the focus of this site.

Thanks to all for your understanding,
Don