TunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables

Автор: Black Hat

Загружено: 2024-03-18

Просмотров: 4135

Описание: We will present two new attacks to leak traffic sent by a VPN client. A rogue Wi-Fi network can abuse these vulnerabilities to make the victim leak IP packets, in plaintext, outside the VPN tunnel. The adversary accomplishes this by manipulating the victim's routing table. Our attacks are independent of the VPN protocol being used, meaning they apply to IPsec, OpenVPN, WireGuard, etc....

By: Mathy Vanhoef

Full Abstract and Presentation Materials:
https://www.blackhat.com/eu-23/briefi...

Не удается загрузить Youtube-плеер. Проверьте блокировку Youtube в вашей сети.
Повторяем попытку...

TunnelCrack: Leaking VPN Traffic by Manipulating Routing Tables

Доступные форматы для скачивания:

Скачать видео

Информация по загрузке:

Скачать аудио

Похожие видео

LogoFAIL: Security Implications of Image Parsing During System Boot

LogoFAIL: Security Implications of Image Parsing During System Boot

WireGuard: Next Generation Secure Network Tunnel

WireGuard: Next Generation Secure Network Tunnel

Compromising LLMs: The Advent of AI Malware

Compromising LLMs: The Advent of AI Malware

A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven

A Decade After Stuxnet: How Siemens S7 is Still an Attacker's Heaven

Off The Record - Weaponizing DHCP DNS Dynamic Updates

Off The Record - Weaponizing DHCP DNS Dynamic Updates

Something Rotten in the State of Data Centers

Something Rotten in the State of Data Centers

Не используй DNS провайдера! Защищённые DOT, DOH DNS + VPN + Keenetic

Не используй DNS провайдера! Защищённые DOT, DOH DNS + VPN + Keenetic

I Am Whoever I Say I Am: Infiltrating Identity Providers Using a 0Click Exploit

I Am Whoever I Say I Am: Infiltrating Identity Providers Using a 0Click Exploit

What Does an LLM-Powered Threat Intelligence Program Look Like?

What Does an LLM-Powered Threat Intelligence Program Look Like?

Взлом 5G! (Эксплойт туннелирования GTP U)

Взлом 5G! (Эксплойт туннелирования GTP U)

DEF CON 31 - Using SIM Tunneling to Travel at Light Speed - Adrian Dabrowski, Gabriel Gegenhuber

DEF CON 31 - Using SIM Tunneling to Travel at Light Speed - Adrian Dabrowski, Gabriel Gegenhuber

SnailLoad: Anyone on the Internet Can Learn What You're Doing

SnailLoad: Anyone on the Internet Can Learn What You're Doing

Evading Logging in the Cloud: Bypassing AWS CloudTrail

Evading Logging in the Cloud: Bypassing AWS CloudTrail

КАК УСТРОЕН TCP/IP?

КАК УСТРОЕН TCP/IP?

Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation

Close Encounters of the Advanced Persistent Kind: Leveraging Rootkits for Post-Exploitation

How NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTs

How NOT to Train Your Hack Bot: Dos and Don'ts of Building Offensive GPTs

No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol

No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol

OSINT для новичков: найдите всё о юзернейме и фото с Sherlock и Google Dorks!

OSINT для новичков: найдите всё о юзернейме и фото с Sherlock и Google Dorks!

VPN НА РОУТЕРЕ В 2026: OpenWRT, VLESS XHTTP, Trojan | Xray, Sing-Box, Hysteria2

VPN НА РОУТЕРЕ В 2026: OpenWRT, VLESS XHTTP, Trojan | Xray, Sing-Box, Hysteria2

УСКОРИЛ ИНТЕРНЕТ В 10 РАЗ?! | Локальный DNS решил проблемы с загрузкой страниц | Adguard Home

УСКОРИЛ ИНТЕРНЕТ В 10 РАЗ?! | Локальный DNS решил проблемы с загрузкой страниц | Adguard Home