Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| clementlecigne [2006/05/26 16:53] – ClementLecigne | clementlecigne [2022/10/05 23:49] (current) – Standardise home: title, category, SITE_UNAVAILABLE KubilayKocak | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ===== About me. ===== | + | ===== Clement Lecigne ===== |
| + | |||
| + | ===== About me ===== | ||
| I'm a 20 years old french student in Network and Telecommunication | I'm a 20 years old french student in Network and Telecommunication | ||
| interested by %%FreeBSD%%, | interested by %%FreeBSD%%, | ||
| systems for both server and workstation for about two years. For more | systems for both server and workstation for about two years. For more | ||
| - | informations | + | information |
| - | [[MailTo(root@clem1.be)|MailTo(root@clem1.be)]]. | + | <clem1@FreeBSD.org>. |
| - | ===== About the project. ===== | + | ===== About the project ===== |
| During this summer, I'll will work around IPv6 and its security. My | During this summer, I'll will work around IPv6 and its security. My | ||
| - | submitted proposal can be reached [http:// | + | submitted proposal can be reached |
| mentor is GeorgeNevilleNeil. | mentor is GeorgeNevilleNeil. | ||
| Line 18: | Line 20: | ||
| * ipv6 stack vulnerabilities reviewing, code auditing, ipv6 stacks testing... | * ipv6 stack vulnerabilities reviewing, code auditing, ipv6 stacks testing... | ||
| - | ==== IPv6 library. ==== | + | ==== IPv6 library ==== |
| Libnet is a powerful C library for packet manipulation, | Libnet is a powerful C library for packet manipulation, | ||
| Line 29: | Line 31: | ||
| In parallel, I will also improve a python library for packet | In parallel, I will also improve a python library for packet | ||
| manipulation wrote by my mentor and begin some code auditing | manipulation wrote by my mentor and begin some code auditing | ||
| - | around the %%FreeBSD%% Kame ipv6 stack. | + | around the %%FreeBSD%% Kame ipv6 stack. This python library will be |
| + | useful to do quick test. | ||
| - | ==== Testing, debuging, exploiting, patching. ==== | + | ==== Testing, debuging, exploiting, patching ==== |
| - | In this very interesting part, I will : | + | In this very interesting part, I will: |
| * review last years worth ipv6 stack vulnerabilities. | * review last years worth ipv6 stack vulnerabilities. | ||
| Line 44: | Line 47: | ||
| * code an ipv6 stack fingerprinter. | * code an ipv6 stack fingerprinter. | ||
| - | ===== Work in progress. ===== | + | At the end of this part, a report will be released. |
| + | |||
| + | ===== What was made? ===== | ||
| + | |||
| + | * libnet ipv6 support. | ||
| + | * ipv6 extension header support | ||
| + | * full icmp6 support | ||
| + | * ipcomp support | ||
| + | * new libnet ipv6 internal functions | ||
| + | * new ipv6 related samples | ||
| + | |||
| + | * pcs (packet construction set) improvements. | ||
| + | * new connectors (bpf wrapper) | ||
| + | * ipv6 support with extension header | ||
| + | * icmp6 support | ||
| + | * new samples | ||
| + | |||
| + | * fuzzers and other tools. | ||
| + | * isicng, a remote ipv6 stack and its components (e.g. tcp) fuzzer | ||
| + | * futo, an easily configurable command line parameters fuzzer | ||
| + | * pyfuzz6, a python ipv6 upper protocol fuzzer (e.g. dhcpv6, dnssec) | ||
| + | * lf6, a set of intelligent fuzzing tools that stresses ipv6 stack localy | ||
| + | * various attacking and integrity checker tools | ||
| + | |||
| + | * code auditing. | ||
| + | * %%FreeBSD%% IPv6 userland related tools (e.g. ping6, traceroute6, | ||
| + | * %%FreeBSD%%/ | ||
| + | |||
| + | ===== Statistics ===== | ||
| + | |||
| + | * new vulnerabilities found : eleven (from remote kernel panic to local memory disclosure) | ||
| + | * vulnerabilities reviewed : most of the disclosed ones. | ||
| + | |||
| + | ===== Results ===== | ||
| + | |||
| + | Summer of Code will be officially over in few days, we, my mentor and me, are currently | ||
| + | improving a paper describing all the work I have done. It will give information about | ||
| + | IPv6 attacks, IPv6 stack vulnerabilities (reviewed and found), IPv6 firewall holes and | ||
| + | others. We plan to release it with all the tools written when all issues will be fixed. | ||
| + | |||
| + | ---- | ||
| - | ... | + | {{tag> |