Fear the Evil FOCA IPv6 Attacks

Architecture and Background

IFear the Evil FOCA: IPv6 attacks in Internet connections CHEMA ALONSO SECURITY RESEARCHER, INFORMATICA64 Windows boxes are running IPv6 by default so LANs are too. Internet is not yet ready for IPv6 worldwide, but... you can connect internal IPv6 networks to external IPv4 web sites with few packets.

Vulnerability Analysis

In this session you will see how using the new Evil FOCA tool, created to perform IPv6 networks attacks, it is possible to hack Internet IPv4 connections creating a man in the middle in IPv6 networks. And yes, it is only one point and click tool that does all for you. Evil FOCA does man in the middle IPv4, man in the middle IPv6, man in the middle IP4-IPv6, SSL strip, collects passwords, session cookies, and much more tricks.

Exploitation and Demonstrations

You will love this new Evil FOCA. Chema Alonso (@chemaalonso) is a Security researcher with Eleven Paths , a Telefonica Digital company. Chema holds respective a PhD in Compter Security on top of Computer Science and System Engineering degrees from Rey Juan Carlos University and Universidad Politecnica de Madrid.

Remediation and Defensive Strategies

During his more than 12 years as a security professional, he has consistently been recognized as a Microsoft Most Valuable Professional (MVP). Chema is a frequent speaker at industry events and has been invited to present at information security conferences worldwide including Black Hat Briefings, Defcon, ShmooCON, DeepSec, HackCON, Ekoparty and RootedCon - He is a frequent contributor on several technical magazines in Spain, where he is involved with state-of-the-art attack and defense mechanisms, web security, general ethical hacking techniques and FOCA tools. Materials: