Abusing ICMPv6 to Manipulate Network Traffic - Network Layer Attack Techniques

Explore a conference talk from BSides Budapest IT Security Conference that delves into the exploitation of Internet Control Message Protocol version 6 (ICMPv6) for network traffic manipulation. Learn how ICMP's legitimate capabilities for managing network layer traffic flow can be weaponized by malicious actors through crafted packets. Examine two detailed proof-of-concept attacks: one focusing on arbitrary IPv6 route injection and another demonstrating traffic redirection through attacker-controlled routers. Understand how these attacks successfully target Windows Server (2012/2016/2019) and CentOS7 systems by exploiting protocol logic and default system configurations, without requiring complex payloads or header corruption. Discover how seemingly legitimate protocol functionalities can be leveraged for network compromise through practical demonstrations and technical analysis.