CiscoInTheSkyWithDiamonds

More documents

Recommendations

Info

NX-OS has a number of functional issues: The “ethanalyzer” vsh command (actually just tshark) can write PCAP files. However, these are unreadable, since they are owned by root with mode 600 SCP to the virtual device fails: “Syntax error while parsing ‘scp –t 0’” OpenSSH (4.5p1) fails with too many authentication failures if you have an RSA, DSA and an ECDSA identity
Why talk about licensing? CSCud01427! VSG gets into unlicensed mode after 1.5.1/1.5.1a to 1.5.2 upgrade. Cisco Virtual Security Gateway (VSG) for Cisco Nexus 1000V Series Switches, may be bypassed during VSM software upgrade due to the VSG license not being actively installed. All the virtual Ethernet ports on the VEM that correspond to the virtual machines (VMs) are kept in pass-through mode, so that these virtual machines are not firewalled. The VEM goes unlicensed mode for VSG, while VSM continues to show it licensed.
Page 1: Observed by Greg & FX
Page 4 and 5: 1967: First systems with IBM CP-67
Page 6 and 7: 10 GigE Virtual Switch
Page 9 and 10: Cisco Nexus Operating System (NX-OS
Page 11 and 12: This being a VMware VM, we can boot
Page 13 and 14: The N1kV requires license files to
Page 15 and 16: Let‘s see what that function does
Page 17 and 18: Exploitation is a bit tricky though
Page 19: The jailbreak script adds a user to
Page 23 and 24: 6 bytes (12 hex chars) “signature
Page 25 and 26: We could now exercise our 1337 reve
Page 28 and 29: CDP is everywhere in Cisco land VM
Page 30 and 31: The VSM stores a set of “opaque d
Page 32 and 33: Offset Size Meaning 0x0 8 Bit Proto
Page 35 and 36: VEMs register themselves with the V
Page 37 and 38: Cisco’s documentation says 128 Bi
Page 39: 1. Compromise a web server in a vir
Page 42 and 43: At Phenoelit, FtR is the go-to-guy
Page 45: Our work with Cisco PSIRT goes back

CiscoInTheSkyWithDiamonds

Create successful ePaper yourself

Delete template?

Save as template?