Post on 08-Oct-2020
transcript
•○○○
•
•
•
•
•••
Subnet 10.11.0.1/24
Access Switch(10.11.0.3)
Windows(Victim) Linux (rpi)
Internet
Firewall\NAT(10.11.0.1)
AttackerCore Switch
•○
•○
•
•
Preamble Sync Payload
00 00 00 00 a7 0f ...
00 00 00 00 a^ 0f ... 00 00 00 00 a7 ...
••
•
Symbol 4B5B code Description
H 00100 Halt
I 11111 Idle
J 11000 Start #1
...
T 01101 End
GTXCLK
TXD[7:0]
TX_EN
TX_ER
...
RXCLK
RXD[7:0]
RX_DV
RX_ER
...
●
●●
GTXCLK
TXD[7:0]
TX_EN
RXCLK
RXD[7:0]
RX_DV
●
4
4
●
●
●
○
●
○
●
○
○
●
●
●
●
●
●
●
●
○
○
○
●
○
○
○
●
●
●
●
●
●
●
●
●
●
●
●●●
●
●
●
●
●
●
●
●
●
●
○○○
○
●
●
●
::ffff:X.X.X.X●
wpad.attacker-domain
Subnet 10.11.0.1/24
Access Switch
Windows(Victim)
Internet
Firewall\NAT AttackerCore Switch
Faulty Cable
●○
○
●○
○
○
●
●
●
●
○
●
●
○
○
○
●
●
●
●
●
EMP