#332: Facebook and BGP |Fake route injection // Python Scapy DOS script EP 3

Nov 4, 2021

Ask episode

Chapters

Transcript

Episode notes

Simple script to DoS Facebook by injecting fake BGP routes into the BGP routing table of a live BGP router. Disclaimer: This video is for educational purposes only. I own all equipment used for this demonstration. No actual attack took place on Facebook or Internet BGP routers. I demonstrate in this video how Python and scapy can inject fake routes into BGP routing tables if BGP routers are not hardened. See the links below on how to protect your routers. In other videos in this series, I showed you how to remove routes and reset BGP neighbor relationships. You need to learn to code! Learn Python. Learn Networking. You are going to be very powerful and very scary if you combine knowledge of networking with Python scripting! But, do good. Learn to code. Learn Linux. Learn Networking. // MENU // Introduction 0:00 Facebook BGP issue: 0:23 Add fake routes = routing loop: 0:45 lol.... routing loop: 1:25 Be warned: 2:26 Routing tables before script: 3:19 Why we need to two routers: 4:05 Cisco ISR router: 4:25 Kali and Python script: 4:48 Python script details: 5:28 Create Python script on Kali Linux: 11:38 Run Python script: 12:15 Verify new route in routing table: 12:56 Verify connectivity to Facebook: 13:40 Change Python script: 13:55 New Python script: 14:33 Test Python script: 15:00 Issue with BGP and script: 15:12 Test script again: 15:58 Successful routing table update: 16:46 Facebook is not available (routing loop): 17:05 BGP is important! 18:54 // BGP MUSIC // You down with BGP: https://www.youtube.com/watch?v=RT-1D... // SCRIPTS // DoS BGP network: https://davidbombal.wiki/bgpupdate Previous BGP video 1: https://youtu.be/39DGVpMt7eQ Previous BGP video 2: https://youtu.be/IFYBIjjXLbQ Playlist: https://davidbombal.wiki/scapy // SCAPY RESOURCES // Website: https://scapy.net/ Documentation: https://scapy.readthedocs.io/en/latest/ // SCAPY INSTALLATION // sudo apt update sudo apt install python3-pip sudo pip3 install scapy // SOCIAL // Discord: https://discord.com/invite/usKSyzb Twitter: https://www.twitter.com/davidbombal Instagram: https://www.instagram.com/davidbombal LinkedIn: https://www.linkedin.com/in/davidbombal Facebook: https://www.facebook.com/davidbombal.co TikTok: http://tiktok.com/@davidbombal YouTube: https://www.youtube.com/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // BGP RESOURCES // NSA: https://www.nsa.gov/Portals/70/docume... Cisco: https://www.cisco.com/c/en/us/support... AWS: https://docs.aws.amazon.com/directcon... Juniper: https://www.juniper.net/documentation... NSRC: https://nsrc.org/workshops/2017/apric... Internet Society: https://www.internetsociety.org/deplo... python bgp facebook bgp facebook meta bgp meta scapy ccna bgp scapy scapy bgp routing cisco routers fake cisco routers fake bgp routes cisco bgp cisco bgp routes fake router fake routers in network fake routes route injection python scapy ccna 200-301 python scripts kali linux linux kali kali linux 2021.3 kali linux 2021 oscp ceh security+ pentest+