IPv6 RA Flood Attacking Debian

Description

For more great info visit his YouTube channel at: http://www.youtube.com/user/sambowne

Demonstration of the CVE-2014-2309 IPv6 RA flood attack from Kali Linux onto Debian Wheezy. Interesting effect--total system freeze for about 60 seconds, then the system recovers even though the attack continues.

More info: https://security-tracker.debian.org/tracker/CVE-2014-2309

Credits: Vikas (camera), var_x (technical setup)

External Video

)

Comments

Order by:

expand all

Per page:

There are no comments yet

POODLE attack takes bytes out of your encrypted data - here's what to do

A great article from Sophos Naked Security Blog. It is a must read to understand, yet another SSL vulnerability. You will also see why learning a bit more about crypto is necessary to understand such attack. It does bring the knowledge you learned in the Cryptography domain to good use.

Categories: SSL and TLS

16.10.2014 · From admin

VUPEN SECURITY BLOG

This is the official VUPEN Vulnerability Research Team blog covering technical analysis and advanced exploitation of critical vulnerabilities on Windows, Linux, and Mac OS X. They are the one of the most active team in the world when it comes to finding zero day vulnerabilities.

Categories: Zero Day Attack

28.09.2014 · From admin

300k vulnerable to Heartbleed two months later

People are not proactive, they are reactive and sometimes plain negligent. There are still people and even people who are working in security that have not heard of Heartbleed and they don't even know what it is. Opportunities for the crackers for sure....

Categories: SSL and TLS

28.06.2014 · From admin

IP V6 RA Flood against Fortinet Fortigate 30D

Another nice video from Sam Bowne showing how a Fortigate 30D is affected by an RA Flood.

Categories: IP V6 · IP V6 Attacks

26.05.2014 · From admin

IP V6 Insecurities by Marc Heuser

Great Video by Marc Heuser on the insecurities of IP V6. A must watch for all.

Categories: IP V6

20.05.2014 · From admin

Key Satellite Communication Links at risk

Great paper from IOActive on weaknesses within key satellite communication systems.

Categories: Satellite Communication

21.04.2014 · From admin

Idaho National Laboratory SCADA Training

The following courses are available through Idaho National Laboratory NSTB program.

Categories: SCADA Training

17.03.2014 · From admin

ISA.ORG training

ISA certification provides an objective, third-party assessment and confirmation of a person’s skills, and gives them the opportunity to stand out from the crowd and be recognized.

Categories: SCADA Training

17.03.2014 · From admin

SCADA Training by SANS - GICSP

SANS has joined forces with industry leaders and experts to strengthen the cybersecurity of Industrial Control Systems (ICS). The initiative is equipping security professionals and control system engineers with the security awareness, work-specific knowledge, and hands-on technical skills needed

Categories: SCADA Training

17.03.2014 · From admin

Critical Infrastructure Protection Training

The information security field is full of certifications – CompTIA, GIAC, CHE, ISC2 CISSP, CISM, with a vast number of areas and directions within these families. In the industrial space, the most “unsecured” enterprise sector compared to well-established information security practice

Categories: Critical Infrastructure · Critical Infrastructure Protection Training · SCADA Training · SCADA and ICS systems

16.03.2014 · From admin

SCADA Vulnerabilities Identified in Power, Petrochemical Plants

More than 7,600 different power, chemical and petrochemical plants may still be vulnerable to a handful of SCADA vulnerabilities made public this week.

Categories: SCADA and ICS systems

16.03.2014 · From admin

How Acunetix Compares with Other Web Application Scanners

Acunetix is once again confirmed as one of the leaders in web application scanning with a 100% detection accuracy and 0% false positives for Reflected Cross-Site Scripting and SQL Injection vulnerabilities, together with a leading WIVET assessment score.

Categories: Web Application Security · Web Vulnerabilities Scanners · Vulnerability Scanners

12.03.2014 · From admin

Security+ Holistic Tutorial - Domain 3 Threats & Vulnerabilities (5 Hours 17 Minutes)

This is Domain 3 of the CompTIA Security+ CBK. It is 21% of the exam.

Categories: Security+ Online CBT

03.03.2014 · From admin

The National Vulnerability Database (NVD)

The NVD was established in 2005 to provide a U.S. government repository of data about software vulnerabilities and configuration settings

Categories: Vulnerability Databases

18.12.2013 · From admin

Rate

0 votes