6lab.cz | RSS Feed http://6lab.cz Networking, IPv6, Security Tue, 24 Oct 2017 08:54:46 +0000 en-US hourly 1 http://wordpress.org/?v=3.9.1 Bypassing ACL using extension headers http://6lab.cz/bypassing-acl-using-extension-headers/ http://6lab.cz/bypassing-acl-using-extension-headers/#comments Wed, 06 Nov 2013 14:34:01 +0000 http://6lab.cz/?p=1849 Read More]]> The video demonstrates how to bypass an access control list on HP A5800 switch using IPv6 and extension headers. The attacker uses kernel modul which adds empty destination-options headers to the whole TCP session, thus is able to connect to any service on the server.

The video is temporarily removed on request from the HP Security team.

About the main author

Matej Gregr

http://www.fit.vutbr.cz/~igregr/ igregr@fit.vutbr.cz

PhD student at Brno University of Technology. He teaches network related courses and his research concerns IPv6 security, monitoring and deployment. He works also as a network administrator at Brno campus network and participates in the European project - GÉAN3 Campus Best Practice.

]]> http://6lab.cz/bypassing-acl-using-extension-headers/feed/ 0 Fake router detection – practical experience http://6lab.cz/fake-router-detection-practical-experience/ http://6lab.cz/fake-router-detection-practical-experience/#comments Mon, 11 Apr 2011 16:33:20 +0000 http://ipv6.vutbr.cz/?p=895 Read More]]> 6to4 (RFC 3056) is a transition mechanism allowing users to communicate with IPv6 enabled sites and services with minimal manual configuration. Globally unique IPv4 address is the only prerequisite. Together with anycast prefix for 6to4 routers (defined in RFC 3068) provides a simple solution, how even an end site can obtain IPv6 connectivity. The mechanism is implemented in all major operation systems. The presentation is focused on problems in local area networks caused by 6to4 implementation in Windows Vista/7. Several monitoring tools are presented, unfortunately, the tools can protect a network only againts missconfigured hosts. The only proper solution is filtering malicious traffic on all access ports. However, the implementation is still not available on most networking equipment.

About the Author

Matej Gregr

http://www.fit.vutbr.cz/~igregr/ igregr@fit.vutbr.cz

PhD student at Brno University of Technology. He teaches network related courses and his research concerns IPv6 security, monitoring and deployment. He works also as a network administrator at Brno campus network and participates in the European project - GÉAN3 Campus Best Practice.

]]> http://6lab.cz/fake-router-detection-practical-experience/feed/ 0