☠️

BGP Hijacking Attack

Complex

Free preview · 2 of 5 steps

BGP's fundamental flaw: implicit trust

BGP was designed in the 1980s for a small, trusted internet. Any AS can announce any prefix — there's no cryptographic authentication of who owns what IP space.

If a router accepts a BGP UPDATE saying "I have a route to 203.0.113.0/24", it believes it. This enables BGP hijacking — announcing someone else's prefixes to redirect their traffic.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step