{"id":1739,"date":"2015-02-09T14:11:14","date_gmt":"2015-02-09T13:11:14","guid":{"rendered":"http:\/\/securite.intrinsec.com\/?p=1739"},"modified":"2015-02-09T14:11:14","modified_gmt":"2015-02-09T13:11:14","slug":"ipv6-et-la-securite-nouvelles-du-front-fevrier-4","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/","title":{"rendered":"IPv6 and security: news from the front \u2013 February"},"content":{"rendered":"<p><strong>New publications<\/strong><\/p>\n<p><strong><a href=\"http:\/\/www.insinuator.net\/2015\/01\/dhcpv6-guard-do-it-like-ra-guard-evasion\/\">DHCPv6 Guard: Do It Like RA Guard Evasion<\/a><em>\u00a0<\/em>by Enno Rey, article published on the Insinuator blog<\/strong><\/p>\n<p>In this article, Enno Rey presents a solution to bypass the countermeasures implemented by Cisco to identify malicious DHCPv6 packets. Again, this solution relies on fragmenting the transmitted packets. Attacks using this technique are numerous and call into question the design of the protocol in general and the fragmentation layer in particular.<\/p>\n<p><a href=\"http:\/\/www.insinuator.net\/2015\/01\/evasion-of-cisco-acls-by-abusing-ipv6-discussion-of-mitigation-techniques\/\"><strong>Evasion of Cisco ACLs by (Ab)Using IPv6 &amp; Discussion of Mitigation Techniques\u00a0<\/strong><\/a><strong>by Enno Rey, article published on the Insinuator blog<\/strong><\/p>\n<p>Following the successful attack described in the article above, Enno Rey decided to use the same approach to test the effectiveness of ACLs implemented on Cisco routers. The attack was successfully carried out using fragmentation and header addition techniques.<\/p>\n<p><strong><a href=\"https:\/\/www.ernw.de\/download\/hardening\/ERNW_Checklist_OSX_Hardening.pdf\">IPv6 Hardening Guide for OS X<\/a>\u00a0by Florian Grunow, Matthias Luft, Michael Thumann, Michael Schaefer published on the website of\u00a0<a href=\"https:\/\/www.intrinsec.com\/wp-admin\/www.ernw.de\">ernw<\/a><\/strong><\/p>\n<p>Following the publication of guides on hardening IPv6 security for Linux and Windows servers, the authors cited above publish a document containing several actions to be implemented in order to limit the risks of IPv6 attacks against OSX systems.<\/p>\n<p><strong>New tools and updates<\/strong><\/p>\n<p><strong>\u00a0<a href=\"http:\/\/www.secfu.net\/tools-scripts\/\">Chiron\u00a0<\/a>by Antonios Atlasis<\/strong><\/p>\n<p>A new version of the Chiron IPv6 attack framework will be presented at the conference\u00a0<a href=\"https:\/\/www.troopers.de\/\">Troopers<\/a>. This new version will include improvements related to support for the MLD (Multicast Listener Discovery) protocol, as well as the addition of DHCPv6 features.<\/p>\n<p>&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Nouvelles publications DHCPv6 Guard: Do It Like RA Guard Evasion\u00a0de Enno Rey,\u00a0article publi\u00e9 sur le [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":51,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-1739","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-veille-securite"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier\" \/>\n<meta property=\"og:description\" content=\"Nouvelles publications DHCPv6 Guard: Do It Like RA Guard Evasion\u00a0de Enno Rey,\u00a0article publi\u00e9 sur le [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2015-02-09T13:11:14+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier\",\"datePublished\":\"2015-02-09T13:11:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/\"},\"wordCount\":300,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"articleSection\":[\"Veille S\u00e9curit\u00e9\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/\",\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2015-02-09T13:11:14+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IPv6 and Security: News from the Front \u2013 February \u2013 INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/","og_locale":"en_US","og_type":"article","og_title":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier","og_description":"Nouvelles publications DHCPv6 Guard: Do It Like RA Guard Evasion\u00a0de Enno Rey,\u00a0article publi\u00e9 sur le [&hellip;]","og_url":"https:\/\/www.intrinsec.com\/en\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/","og_site_name":"INTRINSEC","article_published_time":"2015-02-09T13:11:14+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier","datePublished":"2015-02-09T13:11:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/"},"wordCount":300,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#primaryimage"},"thumbnailUrl":"","articleSection":["Veille S\u00e9curit\u00e9"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/","url":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/","name":"IPv6 and Security: News from the Front \u2013 February \u2013 INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#primaryimage"},"thumbnailUrl":"","datePublished":"2015-02-09T13:11:14+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/ipv6-et-la-securite-nouvelles-du-front-fevrier-4\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"IPv6 et la s\u00e9curit\u00e9 : nouvelles du front \u2013 f\u00e9vrier"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/1739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=1739"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/1739\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/pages\/51"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=1739"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=1739"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=1739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}