Following Enno’s research on “Testing RFC 6980 Implementations with Chiron“, we decided to redo the experiment with FreeBSD targets.
The lab setup was very similar:
- A Cisco Catalyst 3560 switch running the software “C3560c405ex-UNIVERSALK9-M” version 15.2(2)E4 connecting
- A Linux based attacker system running Chiron and
- A FreeBSD target system, running different OS versions and configurations and
- A Linux based laptop running a control script that remotely performed the necessary tasks on the two machines mentioned above
The main question was: Would the impact on the target system and the possible attacks that were observed with the Windows Server 2016 victim be reproducible on other operating systems? Or would those behave totally differently?
Continue reading