Sitemap

Home
Papers / Presentations
White Papers
Tools / Scripts
Advisories
Blog Archive
About me
Contact

Blog

06/28/2020 - How “Encrypted and Authenticated” Payload is Constructed
06/28/2020 - A simple - yet effective - CVE Manager
08/02/2018 - Creating Arbitrary IPv6 Header Chains using Chiron
01/27/2018 - An Introduction to IPv6 Extension Headers
12/26/2017 - Site-to-Site VPN Using strongSwan (and a few Observations for Supported Capabilities)
12/23/2017 - The IKEv2 Header and the Security Association Payload
12/23/2017 - A Glance at IKEv2 Security Association Establishment
04/18/2017 - Testing pfSense as an IPv6 Firewall - A Weird Case (Testing IPv6 Security Devices, Part 2)
04/16/2017 - OPNsense as an IPv6 Firewall (Testing IPv6 Security Devices, Part 1)
11/02/2016 - How to Analyse Protocols for Potential Vulnerabilities
01/16/2016 - A few thoughts about IPv6 Jumbograms(andhow you can send them over normal MTU links)
01/13/2016 - Unusual IPv6 Fragmentation and Operating Systems Responses
03/25/2015 - How To Block Incoming IPv6 Fragments in Latest Red-Hat Releases
03/17/2015 - pfSense and IPv6 Extension Headers. Configuration Capabilities and Default Behaviour.
02/04/2015 - How to Configure Snort to Stop IPv6 Evasion Attacks
01/27/2015 - DHCPv6 Guard: Do It Like RA Guard Evasion
01/27/2015 - Should IPv6 Packets With Source Address ::1 Be Processed When Received on an External Interface?
10/28/2014 - A “Please, Don’t Waste my Time” Approach and the Sourcefire/Snort Evasion
09/26/2014 - MLD and Neighbor Discovery. Are They Related?
09/09/2014 - Chiron at Brucon 14
09/09/2014 - Packet Too Big Messages, Atomic Fragments and Fragmentation in the IPv6 “Real World”
08/16/2014 - Evading Suricata by Combining IPv6 Extension Headers and Fragmentation “Features”
05/27/2014 - A Novel Way of Abusing IPv6 Extension Headers to Evade IPv6 Security Devices
03/25/2014 - Researching IPv6 Security Capabilities (RISC) of Commercial Security Devices
03/22/2014 - Chiron - An all-in-one IPv6 Penetration Testing Framework
02/21/2014 - Pen-Testing IPv6 Security Devices
01/06/2014 - Using a Raspberry pi as a Syslog Server for a (pfsense) firewall
11/14/2013 - Forthcoming "Advanced Attack Techniques against IPv6 Networks" Workshop
11/14/2013 - An IPv6 Scanner is Released
10/07/2013 - IPv6 Support of PfSense 2.1
10/06/2013 - Upcoming Training in "Advanced Attack Techniques Against IPv6 Networks"