bk99.de entertain the web since 1997

bk99.de
CCC · IPv6 securityCurated

Attacks on the IPv6 protocol stack

Summary

van Hauser explains the differences from IPv4, demonstrates weaknesses in IPv6 environments and presents the THC-IPv6 attack toolkit. A larger address field removes neither local attacks nor configuration mistakes. Unnoticed IPv6 can bypass the security rules of operations designed only for IPv4.

Ideas

  • IPv6 changes addressing, neighbour discovery and automatic network configuration.
  • New protocol mechanisms create their own attack surfaces beyond classic IPv4 rules.
  • Packet generators make faulty assumptions in implementations reproducible.

Recommendations

  • Take inventory of IPv6 on all interfaces, even if you do not use it deliberately.
  • Test router advertisements, neighbour discovery and firewall rules in an isolated network.

References

Watch the talk

Search the Web Archive

CCC · 2023

Operation Triangulation: Five vulnerabilities to iPhone surveillance

oct0xor, kucher1n and bzvr_ reconstruct a multi-stage iOS zero-click chain that combined four zero-days and an undocumented hardware feature. The chain used five vulnerabilities, four of them zero-days. The analysis led to fixes for four previously unknown vulnerabilities.

CCC · 2022

Linux security monitoring with audit events

Hilko Bengen shows how Linux auditd delivers fine-grained host events and how the unwieldy format can be made usable for attack detection with reasonable effort. Network monitoring only detects many attacks together with context from the affected host. More telemetry only helps if events are reliably correlated and prioritised.

CCC · 2021

Two-factor authentication for your own SSH server

Florian Winkler shows how SSH can be extended with a second factor via PAM and which configuration steps effectively secure your own Linux server. More factors only increase security if recovery and bypasses are designed just as carefully. A factor stored separately makes the theft of a single file less valuable.