Hacking Cisco NAC - NACATTACK

Uploaded by: helpnetsecurity
Video Description:
At Black Hat Europe 2007 Dror-John Roecher and Michael Thumann showed how they were able to hack the Cisco NAC solution by exploiting a fundamental design flaw. In this video they illustrate how they worked towards this discovery and give us some exploit details. It is not their intention to simply release a tool, they want the audience to understand how Cisco NAC works and why it is not as secure as Cisco wants us to believe.
For more security-related material visit http://www.net-security.org

Tags for this video: blackhat cisco exploit hacking NAC vulnerability

Find more videos in the "Howto" category
See more videos uploaded by helpnetsecurity

Related Videos

Cisco CCNA Videos - Inter-VLAN Routing	Hacking a Computer with a calculator	Cisco - Security Training Video

Wireless Hacking	Cisco vs Juniper	Cisco - IP Phones Training Video

Share This Video:

Download Video

click here

example : copy http://www.youtube.com/v/QjA5faZF1A8 from embed code

Comments for this video: Show || Hide

Comments for this video on YouTube

DUDE you rock.... i ... ( 1 year ago by ha5h)

DUDE you rock.... i need your help :)

Very intresting, I ... ( 1 year ago by Dooobs)

Very intresting, I do a little bit of reverse engineering myself and it is a lenghty process.
So grats to these guys.

I never saw ... ( 1 year ago by eneasquintero)

I never saw anything but two guys talk, demo anyone?

Great video guys! ( 1 year ago by Webmast84)

Great video guys!

Yer solid effort ... ( 1 year ago by masterdanoz)

Yer solid effort indeed. Smartasses :)

if this would be ... ( 1 year ago by Madowstone)

if this would be the only flaw on the cisco devices I would be the gladest man in the world.

An in all honesty, ... ( 1 year ago by splintcer)

An in all honesty, most (if not all) NAC technologies out there suffer from a similar type of flaw. As rightly said at the begining, you are asking an end-device for posture information, which quite frankly can be spoofed - in some cases easily, in other cases not so easily.

Thanks for posting ... ( 1 year ago by tsudohn1mh)

Thanks for posting this video. I got to meet these guys at BH America and I have to say their work is amazing. The research and reverse engineering work alone seemed overwhelming and the hack was brilliant. Thanks for the vid.

Cisco support has ... ( 10 months ago by phillyfunnyguy)

Cisco support has gone down the tubes. I remember calling sales and getting someone who actually could help. Now They are refusing to support Vista with my Pix firewall VPN, I need remote logon for my domain. (SBL) They did everything (including blaming Micrsoft) not to fix my problem. I would expect more out of Cisco then to make a client that only Half works for vista. No plans to make it right, very lame....

Tell a friend:

URL
Embed Code