Skip to content

OpenBSD Remote Exploit and Another IPv6 Vulns

Alfred Ortega

Alfred Ortega details alfredo Ortega: OpenBSD remote Exploit and another IPv6 vulnerabilities OpenBSD is regarded as a very secure Operating System.

Summary

Architecture and Background

Alfredo Ortega: OpenBSD remote Exploit and another IPv6 vulnerabilities OpenBSD is regarded as a very secure Operating System. This article details one of the few remote exploit against this system.

Vulnerability Analysis

A kernel shellcode is described, that disables the protections of the OS and installs a user-mode process. Several other possible techniques of exploitation are described.

Exploitation and Demonstrations

Several other ipv6-related vulnerabilities are described and disclosed. Alfredo Ortega: Born at Esquel, Chubut, Argentina on 1978.

Remediation and Defensive Strategies

Worked on lowly security related works (Mostly cracking) since 2000. Majored in Computer Science in Universidad de la Patagonia San Juan Bosco on 2003 PhD student at ITBA (Instituto Tecnologico de Buenos Aires) Actually working as Exploit Writer for Core Security.

Related talks

Main Stage·50 min

  • DEF CON
  • Red Team
  • Date: Aug 2007
  • Location: Las Vegas

Plet

Plet details plet: Stealing Identity Management Systems Novell's Identity Manager and related components are become fairly common in large networks.

penetration-testingvulnerability-researchexploit-development+1

Main Stage·35 min

  • DEF CON
  • Red Team
  • Date: Aug 2007
  • Location: Las Vegas

Luke Jennings

Luke Jennings details luke Jennings:One Token to Rule Them All: Post-Exploitation Fun in Windows Environments The defense techniques employed by large software manufacturers are getting better.

penetration-testingvulnerability-researchexploit-development+1

Main Stage·29 min

  • DEF CON
  • Red Team
  • Date: Aug 2007
  • Location: Las Vegas

Damian Gomez

Damian Gomez explores intelligent debugging at DEF CON 15, examining penetration-testing and practical defenses.

penetration-testingvulnerability-researchexploit-development+1