Routopsy: Modern Routing Protocol Vulnerability Analysis and Exploitation

Опубликовано: 06 Октябрь 2024
на канале: Black Hat
1,670
39

An often-overlooked area of network security are the routing and redundancy protocols used between routing endpoints. Specifically, Dynamic Routing Protocols (DRP) such as OSPF, RIP, EIGRP, and First Hop Redundancy Protocols (FHRP) such as VRRP and HSRP are poorly understood by InfoSec attackers and defenders, have limited tooling that is either aging and unmaintained or hard to understand without first having a mastery of the protocols. This talk will showcase several common misconfigurations of these protocols on networks, and how this can be used for Person-in-the-Middle attacks and network discovery.

By Szymon Ziolkowski and Tyron Kemp

Full Abstract & Presentation Materials: https://www.blackhat.com/us-20/briefi...