BNAT Hijacking: Repairing Broken Communication Channels

NAT “just works” – sometimes in ways we don’t expect. Thanks to broken vendor implementations and subtle configuration problems, it’s not uncommon to see a router leaking packets. As it turns out, these packets, even in mangled form, often represent a missed opportunity. In this presentation we are going demonstrate how broken communication channels can be repaired to give an attacker an entirely different functional view of your public facing infrastructure. If you’re planning on attending this talk, expect to check your understanding of an "open port” at the door and be ready to discover what your last penetration test probably missed. A suite of open source tools will also be discussed during this presentation that will allow you to identify, weaponize and exploit communications channels that "never existed", but have been there all along!

About the presenter:

Jonathan Claudius is a Security Researcher at Trustwave. He is a member of Trustwave's SpiderLabs - the advanced security team focused on penetration testing, incident response, and application security. He has eleven years of experience in the IT industry with the last nine years specializing in Security. At Trustwave, Jonathan works in the SpiderLabs Research Division where he focuses on vulnerability research, network exploitation and is the creator of the BNAT-Suite. Before joining SpiderLabs, Jonathan ran Trustwave’s Global Security Operations Center.

Before joining Trustwave, Jonathan was a Network Penetration Tester for a Top 10 Consulting and Accounting firm and worked for a US Department of Defense contractor in their Communications Electronics Warfare Division. Jonathan holds a Bachelor of Science in Applied Networking and System Administration from the Rochester Institute of Technology and is a Certified Information Systems Security Professional (CISSP).

http://photos2.meetupstatic.com/photos/event/4/f/e/4/event_117500452.jpeg