Outils

Blackhat USA 2010 - Loki

"Layer 3 will never be the same again"

Loki - a Python based framework implementing many packet generation and attack modules for Layer 3 protocols, including BGP, LDP, OSPF, VRRP and quite a few others.

The story behind Loki:
"I personally remember the release of Yersinia at Black Hat Europe 2005. It was a ground breaking experience: a number of Layer 2 attacks regarded purely theoretical until then, was suddenly available in a mostly automated way. And those guys even showed some forays completely unbeknownst to me at the time. We plan to do the same in Vegas, with a new tool called Loki (after the giant from Norse mythology associated with cunning, trickery and evil). Layer 3 will never be the same again."

Code/Builds:

Sourcecode

Checksum: 9885428bf7fdce914eef265400e0ec1261330722
loki-0.2.4.tar.gz (238KB)

gentoo

Checksum: c29a6cca7a1f7394a473d4b50a1766e9f13fd5a5
loki-0.2.4.ebuild (685Bytes) Checksum: cc080166d03f78dcbfcaf04b0930801cdf039054
Manifest (391Bytes)

ubuntu-10.04:

Checksum: 37ed4558577f095a3f3f15c1f23cef519fefaf09
libdnet_1.11-1_i386.deb (136KB) Checksum: 7634e113f101efef560d2d0cf8e6f89390eccd48
pylibpcap_0.6.2-1_i386.deb (26KB) Checksum: 44091baa4a93deaff7073385956e7dbb0d0e58b2
loki_0.2.4-1_i386.deb (238KB)


Presentation:


Blackhat2010_ERNW_Loki.pdf (7MB)


Videos:


bh10-demos.tar.gz (12MB)


Loki-Wallpaper:


ERNW_loki_wallpaper_1440x900.jpg (549KB)
ERNW_loki_wallpaper_1600x1200.jpg (732KB)

Blackhat Europe 2009 Toolbox

MPLS & BGP-related tools inside

This toolbox was released in line with the presentation of ERNW's talk on backbone security at Black Hat Europe 2009 Briefings. Content of archive: bgp_cli, bgp_md5crack, ldp_cli, mpls_redirect, mpls_tun

SHA2-256 Checksum: 0c67d956787d20b2b6d3d265c2acc030eb783c8b3e58ca65200664f6f8293fc3

bh09_all_your_packets_tools.tar.bz2

Newsletter 19 / Septembre 2007

Le patch basé sur les métriques avec CVSS 2.0 - Concept et méthode

Cette newsletter est en langue allemande.
ERNW_Newsletter_19_CVSS_de.pdf (637KB)
Vous pouvez télécharger ici le calculateur CVSS de ERNW, mentionné dans la newsletter.
ernw-cvsscalc.zip (198KB)

Dror-John Röcher & Patrice Auffret:

Routing Protocol Security - „An example of breaking OSPF“

Dror-John Röcher: ERNW Bulk Switch Config Auditor Tool

Michael Thumann: Too many secrets

Michael Thumann: DNSDigger


TROOPERS11 takes place from 14-18. March 2011 at Heidelberg. Mark your calendars now and sign up for the official TROOPERS newsletter to stay up-to-date. [More]