There is a rather popular post here about a layer 7 denial of service method which directly exploits ipv6 on windows 7 machines.
Original Thread: https://hackforums.net/showthread.php?tid=2602208
I recently tested it at home using backtrack and it is everything it lives up to be. There is no doubt of the absolutely amazing raw destructive power inherent in this DoS method.
Here is a video explaining how it works from defcon 19, I HIGHLY recommend you watch this all the way through it is very informative.
Backtrack 5 has this program automatically built in and is very easily accessed from the terminal. The command is:
where interface is wlan0 or eth0 or ath0
It seems only cisco has decided to act on this vulnerability by adding RA guards to their switches (don't worry, you can bypass that). The only other clear way of stopping the attack is by turning networking discovery off so that computers do not try to automatically connect to each of the randomly spammed ipv6 prefixes flooding the network. Word has it that microsoft also refuses to patch this problem until the later editions of Windows 8, possibly into Windows 9!
This is a very very dangerous tool, use it with care. I'm actually tempted to try and down an entire internet cafe or library later next week, if I decide to I will post a thread on the forums telling tales of my plunder!
🤝
Also if anybody can find this style of DoS working over internet (non local) networks PLEASE post some information, I have seen some floating around the net but nothing too informative yet.
Original Thread: https://hackforums.net/showthread.php?tid=2602208
I recently tested it at home using backtrack and it is everything it lives up to be. There is no doubt of the absolutely amazing raw destructive power inherent in this DoS method.
Here is a video explaining how it works from defcon 19, I HIGHLY recommend you watch this all the way through it is very informative.
Backtrack 5 has this program automatically built in and is very easily accessed from the terminal. The command is:
Code
flood_router6 interfacewhere interface is wlan0 or eth0 or ath0
It seems only cisco has decided to act on this vulnerability by adding RA guards to their switches (don't worry, you can bypass that). The only other clear way of stopping the attack is by turning networking discovery off so that computers do not try to automatically connect to each of the randomly spammed ipv6 prefixes flooding the network. Word has it that microsoft also refuses to patch this problem until the later editions of Windows 8, possibly into Windows 9!
This is a very very dangerous tool, use it with care. I'm actually tempted to try and down an entire internet cafe or library later next week, if I decide to I will post a thread on the forums telling tales of my plunder!
🤝
Also if anybody can find this style of DoS working over internet (non local) networks PLEASE post some information, I have seen some floating around the net but nothing too informative yet.
