<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Chiron on Insinuator.net - Bold Statements</title>
    <link>https://insinuator.net/tags/chiron/</link>
    <description>Recent content in Chiron on Insinuator.net - Bold Statements</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Wed, 04 Mar 2015 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://insinuator.net/tags/chiron/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>A Chiron Workshop at the IPv6 Security Summit of Troopers 15</title>
      <link>https://insinuator.net/2015/03/a-chiron-workshop-at-the-ipv6-security-summit-of-troopers-15/</link>
      <pubDate>Wed, 04 Mar 2015 00:00:00 +0000</pubDate>
      <guid>https://insinuator.net/2015/03/a-chiron-workshop-at-the-ipv6-security-summit-of-troopers-15/</guid>
      <description>&lt;p&gt;This is a guest post from &lt;a href=&#34;https://twitter.com/AntoniosAtlasis&#34;&gt;Antonios Atlasis&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&#34;http://www.insinuator.net/2014/02/a-short-teaser-on-my-new-ipv6-testing-framework/&#34;&gt;Last year&lt;/a&gt;, during the &lt;a href=&#34;https://www.troopers.de/events/troopers14/372_ipv6_security_summit/&#34;&gt;IPv6 Security Summit&lt;/a&gt; of &lt;a href=&#34;https://www.troopers.de/archives/troopers14/&#34;&gt;Troopers 14&lt;/a&gt; I had the pleasure to present publicly, for first time, my IPv6 Penetration Testing / Security Assessment framework called &lt;a href=&#34;http://www.secfu.net/tools-scripts/&#34;&gt;&lt;em&gt;Chiron&lt;/em&gt;&lt;/a&gt;&lt;em&gt;,&lt;/em&gt; while later, it was also presented at &lt;a href=&#34;http://2014.brucon.org/index.php/&#34;&gt;Brucon 14&lt;/a&gt; as part of the 5×5 project. This year, I am returning back to the place where it all started, to the beautiful city of Heidelberg to give another workshop about &lt;em&gt;Chiron&lt;/em&gt; at the &lt;a href=&#34;https://www.troopers.de/events/troopers15/322_ipv6_security_summit/&#34;&gt;IPv6 Security Summit&lt;/a&gt; of &lt;a href=&#34;https://www.troopers.de/troopers/&#34;&gt;Troopers 15&lt;/a&gt;. But, is it just another workshop with the known Chiron features or has something changed?&lt;br&gt;&#xA;I would say a lot :). The most significant enhancements are described below.&lt;/p&gt;</description>
    </item>
    <item>
      <title>A “Please, Don’t Waste my Time” Approach and the Sourcefire/Snort Evasion</title>
      <link>https://insinuator.net/2014/10/a-please-dont-waste-my-time-approach-and-the-sourcefire/snort-evasion/</link>
      <pubDate>Sat, 18 Oct 2014 00:00:00 +0000</pubDate>
      <guid>https://insinuator.net/2014/10/a-please-dont-waste-my-time-approach-and-the-sourcefire/snort-evasion/</guid>
      <description>&lt;p&gt;This is a guest post from &lt;a href=&#34;http://www.secfu.net/about-me/&#34;&gt;Antonios Atlasis&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Yesterday we (Rafael Schaefer, Enno and me) had the pleasure to deliver together our talk at BlackHat Europe 2014 named &lt;a href=&#34;https://www.blackhat.com/eu-14/briefings.html#evasion-of-high-end-idps-devices-at-the-ipv6-era&#34;&gt;Evasion of High-End IDPS Devices at the IPv6 Era&lt;/a&gt; (by the way, latest slides can be found &lt;a href=&#34;https://www.ernw.de/download/Atlasis_Rey_Schaefer_BHEU_2014_Evasion_of_HighEnd_IPS_Devices.pdf&#34;&gt;here&lt;/a&gt; and the white paper &lt;a href=&#34;https://www.ernw.de/download/eu-14-Atlasis-Rey-Schaefer-briefings-Evasion-of-HighEnd-IPS-Devices-wp.pdf&#34;&gt;here&lt;/a&gt;). In this talk we summarised all the IDPS evasion techniques that we have found so far. At previous blogposts I had the chance to describe how to evade &lt;a href=&#34;http://www.insinuator.net/2014/08/evading-idps-by-combining-ipv6-extension-headers-and-fragmentation-features-the-story-of-my-life/&#34;&gt;Suricata&lt;/a&gt; and &lt;a href=&#34;http://www.insinuator.net/2014/05/a-novel-way-of-abusing-ipv6-extension-headers-to-evade-ipv6-security-devices/&#34;&gt;TippingPoint&lt;/a&gt;. In this post I am going to describe some other techniques that can be used to evade &lt;a href=&#34;https://www.snort.org/&#34;&gt;Snort&lt;/a&gt;, and its companion commercial version, &lt;a href=&#34;http://www.sourcefire.com/&#34;&gt;Sourcefire&lt;/a&gt;. The tool used to evade these IDPS is –  what else – &lt;a href=&#34;http://www.insinuator.net/2014/10/chiron-an-all-in-one-ipv6-penetration-testing-framework/&#34;&gt;Chiron&lt;/a&gt;.&lt;/p&gt;</description>
    </item>
    <item>
      <title>Chiron – An All-In-One IPv6 Penetration Testing Framework</title>
      <link>https://insinuator.net/2014/10/chiron-an-all-in-one-ipv6-penetration-testing-framework/</link>
      <pubDate>Sat, 04 Oct 2014 00:00:00 +0000</pubDate>
      <guid>https://insinuator.net/2014/10/chiron-an-all-in-one-ipv6-penetration-testing-framework/</guid>
      <description>&lt;p&gt;This is a guest post from &lt;a href=&#34;http://www.secfu.net/about-me/&#34;&gt;Antonios Atlasis&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Last week I had the pleasure to give you my impressions regarding my experience about &lt;a href=&#34;http://www.insinuator.net/2014/09/hacking-for-a-b33r-at-ghent/&#34;&gt;&lt;em&gt;hacking for b33r at Ghent&lt;/em&gt;&lt;/a&gt;, that is, my participation at &lt;a href=&#34;http://2014.brucon.org/&#34;&gt;&lt;em&gt;BruCON 2014&lt;/em&gt;&lt;/a&gt; hacking conference. As I said among else, the reason that I was there was to present &lt;a href=&#34;http://www.secfu.net/tools-scripts/&#34;&gt;&lt;em&gt;Chiron&lt;/em&gt;&lt;/a&gt;, my IPv6 penetration testing/security assessment framework, which was supported by the &lt;a href=&#34;http://blog.brucon.org/2013/12/2014-5by5-announcement.html&#34;&gt;&lt;em&gt;Brucon 5×5&lt;/em&gt;&lt;/a&gt; program. The first version of &lt;em&gt;Chiron&lt;/em&gt; had been presented at &lt;a href=&#34;https://www.troopers.de/troopers14/troopers14-ipv6-security-summit-2014/troopers14-ipv6-security-summit-2014-workshop-an-all-in-one-advanced-ipv6-testing-framework/index.html&#34;&gt;Troopers 14&lt;/a&gt;, during the &lt;a href=&#34;https://www.troopers.de/troopers14/troopers14-ipv6-security-summit-2014/index.html&#34;&gt;&lt;em&gt;IPv6 Security Summit&lt;/em&gt;&lt;/a&gt;.&lt;/p&gt;</description>
    </item>
    <item>
      <title>“Hacking for a B33r” at Ghent</title>
      <link>https://insinuator.net/2014/09/hacking-for-a-b33r-at-ghent/</link>
      <pubDate>Sat, 27 Sep 2014 00:00:00 +0000</pubDate>
      <guid>https://insinuator.net/2014/09/hacking-for-a-b33r-at-ghent/</guid>
      <description>&lt;p&gt;This is a guest post by &lt;a href=&#34;http://www.secfu.net/about-me/&#34;&gt;Antonios Atlasis&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;This week I had the pleasure to attend &lt;a href=&#34;http://2014.brucon.org/&#34;&gt;BruCON 2014&lt;/a&gt;. While participating at the &lt;em&gt;Brucon 5×5&lt;/em&gt; program, I had also the chance to attend this well-known European Con which is held in the beautiful city of Ghent.&lt;/p&gt;&#xA;&lt;p&gt;The main event took place two days (on 25th and 26th of September), while some very interesting trainings were given in the previous days. There was mainly one track, plus some workshops that you could also attend, if you wished. You could book your seat at one of the workshops using an &lt;a href=&#34;http://sched.brucon.org/&#34;&gt;on-line scheduling system&lt;/a&gt;.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
