Attacking Layer 2 Network Protocols - Red Rock I

DEF CON Workshops are an opportunity to learn from others in our community in a four hour class. The workshops range in difficulty from n00b to hardcore hacker and on almost any topic that you can think of in the realm of hacking.Now on to some things to keep in mind while you look at which workshop(s) to register for:Workshop Registration will be handled online. Announcement will be made as we get ready to open reg the day before.In order to decrease the number of no-shows, DEF CON Workshops will be instituting a $25 registration fee to attendees. Tickets are available on a first come, first served basis. Additional costs include possible low-fee for material costs, if applicable, and will be collected by the instructor at the time of the workshop.There will be a limited number of students on standby lists for each class, should a registration cancel.There will beNOonsite registration, period. Anyone on standby will be notified they are on standby before the conference. There will beNOonsite standby line or list to sign up for. Everything will be arranged pre-con.Students will be limited to purchasing 2 tickets per class.You can register for as many classes as you can attend in one day. ( No two classes at the same time. If you have mastered occupying two spaces at the same time, there are some physics academics who would be pleased to meet you among others)

DEF CON WORKSHOPS

Title: Attacking Layer 2 Network Protocols
Instructor: Troy Defty & Erik Dul
Abstract: 
Layer 2 can be a lesser-known attack surface; the techniques have been known for a while, have well-documented mitigations, and are often thought of as so old, they _can't possibly still be around, right?_  But this under-represented attack surface is also of great value to an attacker. Network segregation on a typical internal network is commonplace, and often heavily relied upon to segregate, isolate, and limit the spread of a compromise. A misconfigured switch or switch port can be the difference between an attacker compromising the desk phones, and core business server infrastructure. And when the misconfiguration can be a single two-word line in a ten-thousand line switch configuration file, it's easy to see how the basic hardening controls can be missed. This workshop will run through analysing Layer 2 network traffic, identifying protocols and information of interest within network traffic, launching DTP attacks to pivot within a misconfigured network, and man-in-the-middling traffic via this pivot to compromise a target host (including using various tools in conjunction with virtual network interfaces). In terms of tooling, we will be looking to utilise the likes of Wireshark, Yersinia and Bettercap to launch the various network attacks, with standard Kali tooling/normal Linux functionality to exploit and escalate privileges on the target host.  Reading list (not required, but can be of interest): https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_arp/configuration/15-mt/arp-15-mt-book/arp-config-arp.html https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_53_se/configuration/guide/2960scg/swvlan.html https://www.computernetworkingnotes.com/ccna-study-guide/vlan-tagging-explained-with-dtp-protocol.html https://www.blackhat.com/presentations/bh-usa-02/bh-us-02-convery-switches.pdf https://digi.ninja/blog/abusing_dtp.php
Level: Beginner
Pre-Requisites:  Basic knowledge of networking particularly with Linux, knowledge of basic Linux exploitation and privilege escalation.
Required Materials: Laptop, 8GB RAM, Kali as a base or a VM with all updates applied, a network card/interface which supports VLAN tagging (this is usually the case with most kit nowadays by default, but just in case!)

Attacking Layer 2 Network Protocols - Red Rock I

More events from DEF CON WORKSHOPS

Follow organizers to get events picked for you

Attacking Layer 2 Network Protocols - Red Rock I

More events from DEF CON WORKSHOPS

Follow organizers to get events picked for you

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.