diff options
| author | Ryan Schanzenbacher <ryan@rschanz.org> | 2023-02-16 23:44:05 -0500 |
|---|---|---|
| committer | Ryan Schanzenbacher <ryan@rschanz.org> | 2023-02-16 23:44:05 -0500 |
| commit | 8d2717603557ba6beec4a235cf90d1cb57091e9b (patch) | |
| tree | d2c95c83ec8f3b81e3008dc5b497af095464a38d | |
| parent | 89f3e2612b11b62c6e235084bae8d14e82a98683 (diff) | |
added report
| -rw-r--r-- | report_rschanzenbacher_hw4.mkd | 12 | ||||
| -rw-r--r-- | report_rschanzenbacher_hw4.pdf | bin | 0 -> 15737 bytes |
2 files changed, 12 insertions, 0 deletions
diff --git a/report_rschanzenbacher_hw4.mkd b/report_rschanzenbacher_hw4.mkd new file mode 100644 index 0000000..294f994 --- /dev/null +++ b/report_rschanzenbacher_hw4.mkd | |||
| @@ -0,0 +1,12 @@ | |||
| 1 | Ryan Schanzenbacher\ | ||
| 2 | 2/16/23\ | ||
| 3 | Team Bravo\ | ||
| 4 | Red Team HW\ | ||
| 5 | |||
| 6 | ### Question Answers | ||
| 7 | |||
| 8 | 1. The goal of this tool is to simply distract the blue team. It is a tool meant to cause chaos, as the method is uses to disable any connectivity is fairly well hidden, unless you know what to look for. As such, the ability for the grey team servers to communicate will be in the red teams control (unless the module is found and removed.) This gives the red team the advantage of being able to cause blue team to lose points whenever we see fit. | ||
| 9 | |||
| 10 | 1. No other tool really inspired this one. The inspiration was knowing that I was eventually going to take this class, and over winter break reading a really interesting Cloudflare engineering blog post that talked about XDP Driver usage within Cloudflare for preventing DDOS attacks. I figured they were an interesting concept I wanted to research further, especially due to their control in the network stack and how early they are run in relation to receiving packets. I figured it would be fairly easy to implement a simple toggle that recreated a `DROP ALL` iptables rule, but with the benefit of being very hidden. | ||
| 11 | |||
| 12 | 1. The feasibility of another team member being able to use my tool? Very easy, it is a simple toggle with a premade script to send the packet. You just need to know the destination IP address. To contribute? A bit harder, as you need to have a basic understanding of C at the very least, but then you need to learn new concepts that are specific to XDP drivers, such as not having any global state, and doing many, ***many***, bounds checks as the XDP driver is preverified for any potential code that can perform a buffer overread and will reject the code if any is found. | ||
diff --git a/report_rschanzenbacher_hw4.pdf b/report_rschanzenbacher_hw4.pdf new file mode 100644 index 0000000..a3b2ae2 --- /dev/null +++ b/report_rschanzenbacher_hw4.pdf | |||
| Binary files differ | |||