Mathscantor's Cyber Journey
VR on IPsec VPN Part 3 - Understanding Different IKEv2 Message Types
In this post, we’ll break down the different IKEv2 message types, exploring their structures, purposes, and roles in establishing and maintaining IPsec VPN connections.
VR on IPsec VPN Part 2 - Experimental Setup
Building a debuggable strongSwan lab from source, configuring PSK and certificate-based IKEv2 road warrior connections, and extracting session keys for Wireshark.
VR on IPsec VPN Part 1 - First Peek Into The Rabbit Hole
The first part of a series on vulnerability research against IPsec VPN, covering the IPsec and IKEv2 background, why the protocol is a worthwhile target, and how we plan to attack it.
Step-by-Step Linux Process Injection Guide Part 6 - Unloading the Payload
How linworm stops its background worker and removes an injected shared library, either while the target keeps running or when the target exits.
Step-by-Step Linux Process Injection Guide Part 5 - Weaponizing Payloads
How linworm keeps a payload alive in the background with a thread and a sleep you can wake, then uses that to run a reverse shell, a beacon, and a memory patch.