This site is a TiddlyWiki -- a Wiki that fits into a single file and is suitable for very small projects. For example it will not support multiple editors.\n\nThe benefit is getting a site up quickly and easily. Anyone who views this site gets the whole Wiki, not just one page at a time.\n\nAt some point we'll migrate this to a more scalable site, but for now it's quick and easy.

To make quoted bits of text stand out, you can use BlockQuotes within your [[tiddler]]s, like this:\n\n~JeremyRuston said:\n<<<\nA TiddlyWiki is like a blog because it's divided up into neat little chunks, but it encourages you to read it by hyperlinking rather than sequentially: if you like, a non-linear blog analogue that binds the individual microcontent items into a cohesive whole.\n<<<\n\nLike BulletPoints and NumberedBulletPoints, you can have multiple levels of BlockQuotes. Just edit this tiddler to see how it's done.\n\n>level 1\n>level 1\n>>level 2\n>>level 2\n>>>level 3\n>>>level 3\n>>level 2\n>level 1\n

http://www.securityfocus.com/archive/1

!Exim Illegal IPv6 Address Buffer Overflow Vulnerability\nBugTraq ID: 12185\nRemote: Unknown\nDate Published: Jan 06 2005\nRelevant URL: http://www.securityfocus.com/bid/12185\nSummary:\nExim is reported susceptible to a buffer overflow vulnerability when attempting to parse illegal IPv6 addresses. This issue is due to a failure of the application to properly bounds check user-supplied input prior to copying it to a fixed-size memory buffer.\n\nThe original reporter suggested that this vulnerability may be exploited to gain elevated privileges via calling Exim with unspecified command line arguments. Gaining elevated privileges would only be possible where the Exim binary is installed with setuid privileges.\n\nIt is conjectured that code paths other than those pertaining to command line processing may result in remotely exploitable buffer overflow vulnerabilities, but this is not confirmed at the present time.\n

!Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability\nBugTraq ID: 12368\nRemote: Yes\nDate Published: Jan 26 2005\nRelevant URL: http://www.securityfocus.com/bid/12368\nSummary:\nA remote denial of service vulnerability affects the IPv6 processing functionality of Cisco IOS. This issue is due to a failure of the affected operating system to properly handle specially crafted network data.\n\nIt is possible for an attacker to produce a sustained denial of service condition against an affected device by continually sending the malicious network data.\n\nAn attacker may leverage this issue to cause an affected device to reload, denying service to legitimate users.\n

!Microsoft IPv6 TCP/IP Loopback LAND Denial of Service Vulnerability\nBugTraq ID: 13658\nRemote: Yes\nLast Updated: 2006-10-11\nRelevant URL: http://www.securityfocus.com/bid/13658\nSummary:\nThe Microsoft Windows IPv6 TCP/IP stack is prone to a 'loopback' \ncondition initiated by sending a TCP packet with the 'SYN' flag set and \nthe source address and port spoofed to equal the destination source and \nport.\n\nWhen a packet of this type is handled, an infinite loop is initiated and \nthe affected system halts.\n\nA remote attacker may exploit this issue to deny service for legitimate \nusers.\n

!Cisco IOS IPv6 Processing Arbitrary Code Execution Vulnerability\nBugTraq ID: 14414\nRemote: Yes\nDate Published: 2005-07-27\nRelevant URL: http://www.securityfocus.com/bid/14414\nSummary:\nA remote arbitrary code execution vulnerability affects the IPv6 processing functionality of Cisco IOS.\n\nA successful attack may allow a remote attacker to execute arbitrary code and gain unauthorized access to the device. An attacker can also leverage this issue to cause an affected device to reload, denying service to legitimate users.\n\nThis issue may be related to BID 12368 (Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability).\n\nCisco has stated that exploitation of this vulnerability in Cisco IOS XR may cause the IPv6 neighbor discovery process to restart. If exploited repeatedly, this could result in a prolonged denial of service affecting IPv6 traffic travelling through the device.\n

!Linux Kernel IPv6 Local Denial of Service Vulnerability\nBugTraq ID: 15156\nRemote: No\nLast Updated: 2007-01-02\nRelevant URL: http://www.securityfocus.com/bid/15156\nSummary:\nLinux Kernel is reported prone to a local denial-of-service vulnerability. \n\nThis issue arises from an infinite loop when binding IPv6 UDP ports.\n

!HP Jetdirect 635n IPv6/~IPsec Print Server IKE Exchange Denial Of Service Vulnerability\nBugTraq ID: 15471\nRemote: Yes\nDate Published: 2005-11-16\nRelevant URL: http://www.securityfocus.com/bid/15471\nSummary:\nHP Jetdirect 635n IPv6/~IPsec Print Server is prone to a denial of service vulnerability. This issue is due to a security flaw in HP's ~IPSec implementation. This vulnerability may be triggered by malformed IKE traffic.\n\nThis issue was discovered with the PROTOS ISAKMP Test Suite and is related to the handling of malformed ~IKEv1 traffic.\n

!Linux Kernel IPv6 ~FlowLable Denial Of Service Vulnerability\nBugTraq ID: 15729\nRemote: No\nLast Updated: 2006-12-20\nRelevant URL: http://www.securityfocus.com/bid/15729\nSummary:\nLinux Kernel is prone to a local denial-of-service vulnerability. \n\nLocal attackers can exploit this vulnerability to corrupt kernel memory or free non-allocated memory. Successful exploitation will crash the kernel, effectively denying service to legitimate users.\n

!Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability\nBugTraq ID: 18930\nRemote: Yes\nLast Updated: 2006-07-10\nRelevant URL: http://www.securityfocus.com/bid/18930\nSummary:\nJUNOS is prone to a remote denial-of-service vulnerability.This issue arises when the application consistently handles specially crafted IPv6 packets.\n\nAll versions of JUNOS Internet Software built prior to May 10, 2006 running on M-series, T-series, and J-series routers are vulnerable.\n

!Sun Solaris 10 Malformed IPv6 Packets Denial of Service Vulnerability\nBugTraq ID: 20195\nRemote: No\nLast Updated: 2006-09-26\nRelevant URL: http://www.securityfocus.com/bid/20195\nSummary:\nSun Solaris 10 is prone to a denial-of-service vulnerability. This issue arises on systems running Solaris 10 x64 without patch 118855-16.\n\nThe vendor has reported that local or remote users on affected computers may trigger a denial-of-service condition through malformed IPv6 network packets.\n\nA successful exploit may allow attackers to crash the operating system, effectively denying\nservice.\n

!Linux Kernel IPv6 Seqfile Handling Local Denial of Service Vulnerability\nBugTraq ID: 20847\nRemote: No\nLast Updated: 2007-02-20\nRelevant URL: http://www.securityfocus.com/bid/20847\nSummary:\nThe Linux kernel is prone to a local denial-of-service vulnerability. This issue is due to a design error in the way seqfiles are handled in the kernel.\n\nThis vulnerability allows local users to cause an infinite loop, resulting in a crash and denying further service to legitimate users.\n\nThis issue affects the Linux kernel 2.6 series up to 2.6.18-stable.\n

!Linux Kernel Multiple IPv6 Packet Filtering Bypass Vulnerabilities\nBugTraq ID: 20955\nRemote: Yes\nLast Updated: 2007-02-12\nRelevant URL: http://www.securityfocus.com/bid/20955\nSummary:\nThe Linux kernel is prone to multiple IPv6 packet-filtering-bypass vulnerabilities because of insufficient handling of fragmented packets.\n\nAn attacker could exploit these issues to bypass ip6_table filtering rules. This could result in a false sense of security because filtering rules set up by system administrators can be bypassed in order to access services that are otherwise protected.\n

!Cisco Multiple Devices Crafted IP Option Multiple Remote Code Execution Vulnerability\nBugTraq ID: 22211\nRemote: Yes\nLast Updated: 2007-01-25\nRelevant URL: http://www.securityfocus.com/bid/22211\nSummary:\nMultiple Cisco switches and routers running Cisco IOS and Cisco IOS XR are prone to multiple remote code-execution vulnerabilities. These issues occur because the devices fail to handle specially crafted network packets. \n\nAn attacker can exploit these issues to execute arbitrary code within the context of the affected device. Failed exploit attempts will result in a denial of service. \n\nThese issues affect only devices that are configured to handle Internet Protocol version 4 (IPv4) packets. These issues do not affect devices that are configured to handle only Internet Protocol version 6 (IPv6) packets. \n\nThese issues are being tracked by Cisco Bug ~IDs ~CSCeh52410 and ~CSCec71950.\n

!~OpenBSD ~ICMPV6 Packet Handling Remote Buffer Overflow Vulnerability\nBugTraq ID: 22901\nRemote: Yes\nLast Updated: 2007-03-14\nRelevant URL: http://www.securityfocus.com/bid/22901\nSummary:\n~OpenBSD is prone to a remote buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. \n\nA remote attacker can exploit this issue to execute arbitrary code with kernel-level privileges or to crash the affected computer. Successful exploits will result in a complete compromise of vulnerable computers or cause denial-of-service conditions.\n

!Linux Kernel ~IPV6_Getsockopt_Sticky Memory Leak Information Disclosure Vulnerability\nBugTraq ID: 22904\nRemote: No\nLast Updated: 2007-04-05\nRelevant URL: http://www.securityfocus.com/bid/22904\nSummary:\nLinux Kernel is prone to an information-disclosure vulnerability because it fails to handle unexpected user-supplied input.\n\nSuccessful exploits will allow attackers to obtain portions of kernel memory. Information harvested may be used in further attacks.\n\nKernel versions 2.6.0 up to 2.6.20.1 are vulnerable to this issue.\n

! Linux Kernel ~IPV6_SockGlue.c NULL Pointer Dereference Vulnerability\n\nBugTraq ID: 23142\nRemote: No\nDate Published: 2007-03-26\nRelevant URL: http://www.securityfocus.com/bid/23142\nSummary:\nThe Linux kernel is prone to a ~NULL-pointer dereference vulnerability.\n\nA local attacker can exploit this issue to crash the affected application, denying service to legitimate users. The attacker may also be able to execute arbitrary code with elevated privileges, but this has not been confirmed.\n\n

! Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability\n\nBugTraq ID: 23293\nRemote: Yes\nDate Published: 2007-04-03\nRelevant URL: http://www.securityfocus.com/bid/23293\nSummary:\nMicrosoft Windows Vista is exposed to a discovery spoofing issue. The issue exists when the operating system receives unsolicited Neighbor Advertisements (~NAs). An attacker can exploit this issue by responding to queries and sending spoofed Neighbor Advertisements or blindly sending Neighbor Advertisements.\n\nAn attacker can exploit this issue to conduct redirect attacks on another host on the network. This may lead to further attacks.\n\nNote that to exploit this issue, the attacker must have access to the local network segment of a target computer.

! Microsoft Windows Vista Teredo UDP Nonce Spoofing Weakness\n\nBugTraq ID: 23301\nRemote: Yes\nDate Published: 2007-04-04\nRelevant URL: http://www.securityfocus.com/bid/23301\nSummary:\nWindows Vista Teredo is a protocol transition mechanism which accommodates IPv6 tunneling over IPv4 Network Address Translation (NAT) devices. The application is exposed to a nonce spoofing weakness.\n\nWindows Vistsa Teredo server is prone to a nonce-spoofing weakness due to its use of a nonce during the lifetime of certain connections.\n\nThis weakness can aid in attempts to spoof a Teredo server.

! Linux Kernel ~Fib_Semantics.C Out Of Bounds Access\n\nBugTraq ID: 23447\nRemote: Yes\nDate Published: 2007-04-09\nRelevant URL: http://www.securityfocus.com/bid/23447\nSummary:\nThe Linux kernel is exposed to an out of bounds access issue. This issue occurs because the semantics for IPv4 Forwarding\nInformation Base fail to adequately bounds check user-supplied data before accessing an array. The Linux versions prior to 2.6.21-rc6 are affected. An attacker can exploit this issue to cause denial-of-service conditions. Arbitrary code execution may also be possible, but this has not been confirmed.

! Sun Solaris IP Implementation Remote Denial of Service\n\nBugTraq ID: 23468\nRemote: Yes\nDate Published: 2007-04-12\nRelevant URL: http://www.securityfocus.com/bid/23468\nSummary:\nSun Solaris is prone to a local and remote denial-of-service vulnerability because the software fails to handle exceptional conditions. An attacker can exploit this issue to exhaust CPU resources and cause a denial-of-service condition against network services provided by the system or local services. This issue affects Solaris 8 and Solaris 9.\n

! IPv6 Protocol Type 0 Route Header Denial of Service Vulnerability\n\nBugTraq ID: 23615\nRemote: Yes\nLast Updated: 2007-04-24\nRelevant URL: http://www.securityfocus.com/bid/23615\nSummary:\nIPv6 protocol implementations are prone to a denial-of-service vulnerability due to a design error.\n\nExploiting this issue allows attackers to cause denial-of-service conditions.\n\nThis issue is related to the issue discussed in BID 22210 (Cisco IOS IPv6 Source Routing Remote Memory Corruption Vulnerability).\n

Creating BulletPoints is simple.\n* Just add an asterisk\n* at the beginning of a line.\n** If you want to create sub-bullets\n** start the line with two asterisks\n*** And if you want yet another level\n*** use three asterisks\n* Edit this tiddler to see how it's done\n* You can also do NumberedBulletPoints

/%RGB hexadecimal 216-color "Web safe" palette %/\nSource: Paul Petterson, revised by Eric Shulman\n{{menubox{\n|bgcolor(#FFF):FFF |bgcolor(#CCC):CCC |bgcolor(#999):999 |bgcolor(#666):@@color(white):666@@ |bgcolor(#333):@@color(white):333@@ |bgcolor(#000):@@color(white):000@@ |bgcolor(#FC0):~FC0 |bgcolor(#F90):F90 |bgcolor(#F60):@@color(white):F60@@ |bgcolor(#F30):@@color(white):F30@@ |>|>|>|>|>| |\n|bgcolor(#9C0):9C0 |>|>|>| |bgcolor(#C90):C90 |bgcolor(#FC3):~FC3 |bgcolor(#FC6):~FC6 |bgcolor(#F96):F96 |bgcolor(#F63):@@color(white):F63@@ |bgcolor(#C30):@@color(white):C30@@ |>|>|>| |bgcolor(#C03):@@color(white):C03@@ |\n|bgcolor(#CF0):~CF0 |bgcolor(#CF3):~CF3 |bgcolor(#330):@@color(white):330@@ |bgcolor(#660):@@color(white):660@@ |bgcolor(#990):990 |bgcolor(#CC0):~CC0 |bgcolor(#FF0):~FF0 |bgcolor(#C93):C93 |bgcolor(#C63):@@color(white):C63@@ |bgcolor(#300):@@color(white):300@@ |bgcolor(#600):@@color(white):600@@ |bgcolor(#900):@@color(white):900@@ |bgcolor(#C00):@@color(white):C00@@ |bgcolor(#F00):@@color(white):F00@@ |bgcolor(#F36):@@color(white):F36@@ |bgcolor(#F03):@@color(white):F03@@ |\n|bgcolor(#9F0):9F0 |bgcolor(#CF6):~CF6 |bgcolor(#9C3):9C3 |bgcolor(#663):@@color(white):663@@ |bgcolor(#993):993 |bgcolor(#CC3):~CC3 |bgcolor(#FF3):~FF3 |bgcolor(#960):@@color(white):960@@ |bgcolor(#930):@@color(white):930@@ |bgcolor(#633):@@color(white):633@@ |bgcolor(#933):@@color(white):933@@ |bgcolor(#C33):@@color(white):C33@@ |bgcolor(#F33):@@color(white):F33@@ |bgcolor(#C36):@@color(white):C36@@ |bgcolor(#F69):@@color(white):F69@@ |bgcolor(#F06):@@color(white):F06@@ |\n|bgcolor(#6F0):6F0 |bgcolor(#9F6):9F6 |bgcolor(#6C3):6C3 |bgcolor(#690):690 |bgcolor(#996):996 |bgcolor(#CC6):~CC6 |bgcolor(#FF6):~FF6 |bgcolor(#963):@@color(white):963@@ |bgcolor(#630):@@color(white):630@@ |bgcolor(#966):@@color(white):966@@ |bgcolor(#C66):@@color(white):C66@@ |bgcolor(#F66):@@color(white):F66@@ |bgcolor(#903):@@color(white):903@@ |bgcolor(#C39):@@color(white):C39@@ |bgcolor(#F6C):@@color(white):~F6C@@ |bgcolor(#F09):@@color(white):F09@@ |\n|bgcolor(#3F0):3F0 |bgcolor(#6F3):6F3 |bgcolor(#390):390 |bgcolor(#6C0):6C0 |bgcolor(#9F3):9F3 |bgcolor(#CC9):~CC9 |bgcolor(#FF9):~FF9 |bgcolor(#C96):C96 |bgcolor(#C60):@@color(white):C60@@ |bgcolor(#C99):C99 |bgcolor(#F99):F99 |bgcolor(#F39):@@color(white):F39@@ |bgcolor(#C06):@@color(white):C06@@ |bgcolor(#906):@@color(white):906@@ |bgcolor(#F3C):@@color(white):~F3C@@ |bgcolor(#F0C):@@color(white):~F0C@@ |\n|bgcolor(#0C0):0C0 |bgcolor(#3C0):3C0 |bgcolor(#360):@@color(white):360@@ |bgcolor(#693):693 |bgcolor(#9C6):9C6 |bgcolor(#CF9):~CF9 |bgcolor(#FFC):FFC |bgcolor(#FC9):~FC9 |bgcolor(#F93):F93 |bgcolor(#FCC):FCC |bgcolor(#F9C):~F9C |bgcolor(#C69):@@color(white):C69@@ |bgcolor(#936):@@color(white):936@@ |bgcolor(#603):@@color(white):603@@ |bgcolor(#C09):@@color(white):C09@@ |bgcolor(#303):@@color(white):303@@ |\n|bgcolor(#3C3):3C3 |bgcolor(#6C6):6C6 |bgcolor(#0F0):0F0 |bgcolor(#3F3):3F3 |bgcolor(#6F6):6F6 |bgcolor(#9F9):9F9 |bgcolor(#CFC):CFC |>|>| |bgcolor(#C9C):~C9C |bgcolor(#969):@@color(white):969@@ |bgcolor(#939):@@color(white):939@@ |bgcolor(#909):@@color(white):909@@ |bgcolor(#636):@@color(white):636@@ |bgcolor(#606):@@color(white):606@@ |\n|bgcolor(#060):@@color(white):060@@ |bgcolor(#363):@@color(white):363@@ |bgcolor(#090):090 |bgcolor(#393):393 |bgcolor(#696):696 |bgcolor(#9C9):9C9 |>|>| |bgcolor(#FCF):FCF |bgcolor(#F9F):~F9F |bgcolor(#F6F):@@color(white):~F6F@@ |bgcolor(#F3F):@@color(white):~F3F@@ |bgcolor(#F0F):@@color(white):~F0F@@ |bgcolor(#C6C):@@color(white):~C6C@@ |bgcolor(#C3C):@@color(white):~C3C@@ |\n|bgcolor(#030):@@color(white):030@@ |bgcolor(#0C3):0C3 |bgcolor(#063):@@color(white):063@@ |bgcolor(#396):396 |bgcolor(#6C9):6C9 |bgcolor(#9FC):9FC |bgcolor(#CFF):CFF |bgcolor(#39F):39F |bgcolor(#9CF):9CF |bgcolor(#CCF):CCF |bgcolor(#C9F):~C9F |bgcolor(#96C):@@color(white):96C@@ |bgcolor(#639):@@color(white):639@@ |bgcolor(#306):@@color(white):306@@ |bgcolor(#90C):@@color(white):90C@@ |bgcolor(#C0C):@@color(white):~C0C@@ |\n|bgcolor(#0F3):0F3 |bgcolor(#3F6):3F6 |bgcolor(#093):093 |bgcolor(#0C6):0C6 |bgcolor(#3F9):3F9 |bgcolor(#9FF):9FF |bgcolor(#9CC):9CC |bgcolor(#06C):@@color(white):06C@@ |bgcolor(#69C):69C |bgcolor(#99F):99F |bgcolor(#99C):99C |bgcolor(#93F):@@color(white):93F@@ |bgcolor(#60C):@@color(white):60C@@ |bgcolor(#609):@@color(white):609@@ |bgcolor(#C3F):@@color(white):~C3F@@ |bgcolor(#C0F):@@color(white):~C0F@@ |\n|bgcolor(#0F6):0F6 |bgcolor(#6F9):6F9 |bgcolor(#3C6):3C6 |bgcolor(#096):096 |bgcolor(#6FF):6FF |bgcolor(#6CC):6CC |bgcolor(#699):699 |bgcolor(#036):@@color(white):036@@ |bgcolor(#369):@@color(white):369@@ |bgcolor(#66F):@@color(white):66F@@ |bgcolor(#66C):@@color(white):66C@@ |bgcolor(#669):@@color(white):669@@ |bgcolor(#309):@@color(white):309@@ |bgcolor(#93C):@@color(white):93C@@ |bgcolor(#C6F):@@color(white):~C6F@@ |bgcolor(#90F):@@color(white):90F@@ |\n|bgcolor(#0F9):0F9 |bgcolor(#6FC):6FC |bgcolor(#3C9):3C9 |bgcolor(#3FF):3FF |bgcolor(#3CC):3CC |bgcolor(#399):399 |bgcolor(#366):@@color(white):366@@ |bgcolor(#069):@@color(white):069@@ |bgcolor(#039):@@color(white):039@@ |bgcolor(#33F):@@color(white):33F@@ |bgcolor(#33C):@@color(white):33C@@ |bgcolor(#339):@@color(white):339@@ |bgcolor(#336):@@color(white):336@@ |bgcolor(#63C):@@color(white):63C@@ |bgcolor(#96F):@@color(white):96F@@ |bgcolor(#60F):@@color(white):60F@@ |\n|bgcolor(#0FC):0FC |bgcolor(#3FC):3FC |bgcolor(#0FF):0FF |bgcolor(#0CC):0CC |bgcolor(#099):099 |bgcolor(#066):@@color(white):066@@ |bgcolor(#033):@@color(white):033@@ |bgcolor(#39C):39C |bgcolor(#36C):@@color(white):36C@@ |bgcolor(#00F):@@color(white):00F@@ |bgcolor(#00C):@@color(white):00C@@ |bgcolor(#009):@@color(white):009@@ |bgcolor(#006):@@color(white):006@@ |bgcolor(#003):@@color(white):003@@ |bgcolor(#63F):@@color(white):63F@@ |bgcolor(#30F):@@color(white):30F@@ |\n|bgcolor(#0C9):0C9 |>|>|>| |bgcolor(#09C):09C |bgcolor(#3CF):3CF |bgcolor(#6CF):6CF |bgcolor(#69F):69F |bgcolor(#36F):@@color(white):36F@@ |bgcolor(#03C):@@color(white):03C@@ |>|>|>| |bgcolor(#30C):@@color(white):30C@@ |\n|>|>|>|>|>| |bgcolor(#0CF):0CF |bgcolor(#09F):09F |bgcolor(#06F):@@color(white):06F@@ |bgcolor(#03F):@@color(white):03F@@ |>|>|>|>|>| |\n<script>place.lastChild.style.width="95%"</script>}}}

You can wrap any text in an HTML {{{<span>}}} or {{{<div>}}} with a specified CSS class. This allows custom CSS styling in a nice, modular way. By placing a rule in your StyleSheet tiddler like {{{.wrappingClass{color: #666; background: #bbb} }}} you can markup a piece of text in the tiddler using this code:\n\n{{{\n{{wrappingClass{Text that is now accentuated}}}\n}}}\n\n{{wrappingClass{Text that is now accentuated}}}\n\nBy default, the text is placed in a {{{<span>}}}. To use a {{{<div>}}} instead, insert a line break before the text:\n\n{{{\n{{wrappingClass{\nText that is now accentuated}}}\n}}}\n\n{{wrappingClass{\nText that is now accentuated}}}\n

Several Macros including the ~TodayMacro take a DateFormatString as an optional argument. This string can be a combination of ordinary text, with some special characters that get substituted by parts of the date.\n\nSee the ~TiddlyWiki.html file for details.

Home\n\n[[Getting Started]]

{{{\n[img[title|filename]]\n[img[filename]]\n[img[title|filename][link]]\n[img[filename][link]]\n}}}\nImages can be included by their filename or full URL. It's good practice to include a title to be shown as a tooltip, and when the image isn't available. An image can also link to another tiddler or or a URL\n[img[Romanesque broccoli|fractalveg.jpg][http://www.flickr.com/photos/jermy/10134618/]]\n{{{\n[img[Fractal vegetable|fractalveg.jpg]]\n[img[This is shown as a tooltip|http://example.com/image.jpg]]\n[img[http://example.com/image.jpg]]\n[img[http://example.com/image.jpg][ExampleDotCom]]\n}}}\nThe tooltip is optional.\n\n[<img[Forest|forest.jpg][http://www.flickr.com/photos/jermy/8749660/]][>img[Field|field.jpg][http://www.flickr.com/photos/jermy/8749285/]]You can also float images to the left or right: the forest is left aligned with {{{[<img[}}}, and the field is right aligned with {{{[>img[}}}.\n@@clear(left):clear(right):display(block):You can use CSS to clear the floats@@\n{{{\n[<img[A woody bit of Hampstead Heath|forest.jpg]]\n[>img[A field near Milton Keynes|field.jpg]]\n}}}

Like most wikis, TiddlyWiki supports a range of simplified character formatting:\n| !To get | !Type this |h\n| ''Bold'' | {{{''Bold''}}} |\n| --Strikethrough-- | {{{--Strikethrough--}}} |\n| __Underline__ | {{{__Underline__}}} (that's two underline characters) |\n| //Italic// | {{{//Italic//}}} |\n| Superscript: 2^^3^^=8 | {{{2^^3^^=8}}} |\n| Subscript: a~~ij~~ = -a~~ji~~ | {{{a~~ij~~ = -a~~ji~~}}} |\n| @@highlight@@ | {{{@@highlight@@}}} |\n<<<\nThe highlight can also accept CSS syntax to directly style the text:\n@@color:green;green coloured@@\n@@background-color:#ff0000;color:#ffffff;red coloured@@\n@@text-shadow:black 3px 3px 8px;font-size:18pt;display:block;margin:1em 1em 1em 1em;border:1px solid black;Access any CSS style@@\n<<<\n\n//For backwards compatibility, the following highlight syntax is also accepted://\n{{{\n@@bgcolor(#ff0000):color(#ffffff):red coloured@@\n}}}\n@@bgcolor(#ff0000):color(#ffffff):red coloured@@

First you should review the project overview to see if this is what you need.\n\nThen you should download the VMware images to try this tool out, following one of the tutorials.\n\nIf all goes well, then download the code and start to use it!\n\nFinally, we encourage you to contribute back to this project to make it better.

To get started with this blank TiddlyWiki, you'll need to modify the following tiddlers:\n* SiteTitle & SiteSubtitle: The title and subtitle of the site, as shown above (after saving, they will also appear in the browser title bar)\n* MainMenu: The menu (usually on the left)\n* DefaultTiddlers: Contains the names of the tiddlers that you want to appear when the TiddlyWiki is opened\nYou'll also need to enter your username for signing your edits: <<option txtUserName>>\n\nSee the [[formatting]] entry for help on how to create entries.\n\nKey mappings only work if they haven't been used by the browser. For example, in Firefox you can use <alt><shift><j> to create a new journal entry but can't use <alt><shift><s> to save changes to this file.\n\nOpen the SideBarOptions entry and edit the DateFormatString if the default is not what you need.

!!!Dynamic Analysis or Fuzzing Of\n* The [[Stateless autoconfiguration]] feature of IPv6\n* Techniques such as [[VoodooNet]] which hide data in IPv6 error messages as a covert channel\n\n!!!Discover vulnerabilities similar to:\n* BugTraq12185 - Exim Illegal IPv6 Address Buffer Overflow Vulnerability\n* BugTraq12368 - Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability\n* BugTraq13658 - Microsoft IPv6 TCP/IP Loopback LAND Denial of Service Vulnerability\n* BugTraq14414 - Cisco IOS IPv6 Processing Arbitrary Code Execution Vulnerability\n* BugTraq15156 - Linux Kernel IPv6 Local Denial of Service Vulnerability\n* BugTraq15471 - HP Jetdirect 635n IPv6/~IPsec Print Server IKE Exchange Denial Of Service Vulnerability\n* BugTraq15729 - Linux Kernel IPv6 ~FlowLable Denial Of Service Vulnerability\n* BugTraq18930 - Juniper Networks JUNOS IPv6 Packet Processing Remote Denial of Service Vulnerability\n* BugTraq20195 - Sun Solaris 10 Malformed IPv6 Packets Denial of Service Vulnerability\n* BugTraq20847 - Linux Kernel IPv6 Seqfile Handling Local Denial of Service Vulnerability\n* BugTraq20955 - Linux Kernel Multiple IPv6 Packet Filtering Bypass Vulnerabilities\n* BugTraq22211 - Cisco Multiple Devices Crafted IP Option Multiple Remote Code Execution Vulnerability\n* BugTraq22901 - ~OpenBSD ICMPv6 Packet Handling Remote Buffer Overflow Vulnerability\n* BugTraq22904 - Linux Kernel ~IPV6_Getsockopt_Sticky Memory Leak Information Disclosure Vulnerability\n* BugTraq23142 - Linux Kernel ~IPV6_SockGlue.c NULL Pointer Dereference Vulnerability\n* BugTraq23447 - Linux Kernel ~Fib_Semantics.C Out Of Bounds Access\n* BugTraq23468 - Sun Solaris IP Implementation Remote Denial of Service\n* BugTraq23293 - Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability\n* BugTraq23301 - Microsoft Windows Vista Teredo UDP Nonce Spoofing Weakness\n* BugTraq23615 - IPv6 Protocol Type 0 Route Header Denial of Service Vulnerability\n\n\nNOTE: This is not a comprehensive list, only representative. It also does not reflect full objectives. Each item on this list must be further analyzed to determine what features would be needed to discover a similar vulnerability, at which time individual features will be added or dropped.

The goal of this project is to develop a single tool for IPv4 and IPv6 testing. Some tools exist but an integrated tool that includes all the desired features is missing.\n\nThe objective of this project is to develop a single, modular, extensible tool that will provide:\n* IPv4 and IPv6 packet fuzzing\n* Session awareness\n* State awareness\n* 6to4 and 4to6 tunnelling\n* Logging\n* Ease of use\n* Rich options\n* Cross platform support\n\nThis tool is being developed in Python for the Windows and Linux operating systems. Additional operating systems should be possible with minimal effort.

You can divide a tiddler into\n----\nsections by typing four dashes on a line by themselves

Entities in HTML documents allow characters to be entered that can't easily be typed on an ordinary keyboard. They take the form of an ampersand (&), an identifying string, and a terminating semi-colon (;). There's a complete reference [[here|http://www.htmlhelp.com/reference/html40/entities/]]; some of the more common and useful ones are shown below. Also see [[Paul's Notepad|http://thepettersons.org/PaulsNotepad.html#GreekHtmlEntities%20HtmlEntitiesList%20LatinHtmlEntities%20MathHtmlEntities]] for a more complete list.\n\n|>|>|>|>|>|>| !HTML Entities |\n| &amp;nbsp; | &nbsp; | no-break space | &nbsp;&nbsp; | &amp;apos; | &apos; | single quote, apostrophe |\n| &amp;ndash; | &ndash; | en dash |~| &amp;quot; | &quot; | quotation mark |\n| &amp;mdash; | &mdash; | em dash |~| &amp;prime; | &prime; | prime; minutes; feet |\n| &amp;hellip; | &hellip; | horizontal ellipsis |~| &amp;Prime; | &Prime; | double prime; seconds; inches |\n| &amp;copy; | &copy; | Copyright symbol |~| &amp;lsquo; | &lsquo; | left single quote |\n| &amp;reg; | &reg; | Registered symbol |~| &amp;rsquo; | &rsquo; | right single quote |\n| &amp;trade; | &trade; | Trademark symbol |~| &amp;ldquo; | &ldquo; | left double quote |\n| &amp;dagger; | &dagger; | dagger |~| &amp;rdquo; | &rdquo; | right double quote |\n| &amp;Dagger; | &Dagger; | double dagger |~| &amp;laquo; | &laquo; | left angle quote |\n| &amp;para; | &para; | paragraph sign |~| &amp;raquo; | &raquo; | right angle quote |\n| &amp;sect; | &sect; | section sign |~| &amp;times; | &times; | multiplication symbol |\n| &amp;uarr; | &uarr; | up arrow |~| &amp;darr; | &darr; | down arrow |\n| &amp;larr; | &larr; | left arrow |~| &amp;rarr; | &rarr; | right arrow |\n| &amp;lArr; | &lArr; | double left arrow |~| &amp;rArr; | &rArr; | double right arrow |\n| &amp;harr; | &harr; | left right arrow |~| &amp;hArr; | &hArr; | double left right arrow |\n\nThe table below shows how accented characters can be built up by subsituting a base character into the various accent entities in place of the underscore ('_'):\n\n|>|>|>|>|>|>|>|>|>|>|>|>|>|>|>|>|>| !Accented Characters |\n| grave accent | &amp;_grave; | &Agrave; | &agrave; | &Egrave; | &egrave; | &Igrave; | &igrave; | &Ograve; | &ograve; | &Ugrave; | &ugrave; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; |\n| acute accent | &amp;_acute; | &Aacute; | &aacute; | &Eacute; | &eacute; | &Iacute; | &iacute; | &Oacute; | &oacute; | &Uacute; | &uacute; | &nbsp; | &nbsp; | &Yacute; | &yacute; | &nbsp; | &nbsp; |\n| circumflex accent | &amp;_circ; | &Acirc; | &acirc; | &Ecirc; | &ecirc; | &Icirc; | &icirc; | &Ocirc; | &ocirc; | &Ucirc; | &ucirc; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; |\n| umlaut mark | &amp;_uml; | &Auml; | &auml; | &Euml; | &euml; | &Iuml; | &iuml; | &Ouml; | &ouml; | &Uuml; | &uuml; | &nbsp; | &nbsp; | &Yuml; | &yuml; | &nbsp; | &nbsp; |\n| tilde | &amp;_tilde; | &Atilde; | &atilde; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &Otilde; | &otilde; | &nbsp; | &nbsp; | &Ntilde; | &ntilde; | &nbsp; | &nbsp; | &nbsp; | &nbsp; |\n| ring | &amp;_ring; | &Aring; | &aring; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; |\n| slash | &amp;_slash; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &Oslash; | &oslash; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; |\n| cedilla | &amp;_cedil; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &nbsp; | &Ccedil; | &ccedil; |

!Resources on IPv6\n\n!!Articles on line\n# __Everything you need to know about IPv6 __ By Iljitsch van Beijnum, 7 March 2007, http://arstechnica.com/articles/paedia/IPv6.ars

The format for PrettyLinks allows for links that open local or network folders. Depending on your browser and operating system, the folders are opened in Windows Explorer, the OS X Finder, or the browser itself.\n\nEdit this tiddler to see [[this link to a Windows network share|file://///server/share/folder/path/name]], [[this link to a Windows drive-mapped folder|file:///c:/folder/path/name]] and [[this link to a Unix-style folder|file:///folder/path/name]].

[[Home]]\n\n[[Project Overview]]\n* [[Goals]]\n* [[Objectives]]\n* [[Status]]\n\n[[Details]]\n* [[Roadmap]]\n* [[Screenshots]]\n* [[Downloads]]\n* [[Tutorials]]\n\n[[About This Site]]\n^^TiddlyWiki <<version>>^^\n\n\nSite Hosted By:\n[img[SourceForge.net|http://sourceforge.net/sflogo.php?group_id=50252&amp;type=4][http://sourceforge.net]]\n

{{{Monospaced text}}} is supported - edit this tiddler to see the syntax.\n\nYou can also have monospaced blocks (useful for source code):\n\n{{{\nvar posTop = findPosY(e);\nvar posBot = posTop + e.offsetHeight;\nvar winTop = findScrollY();\nvar winHeight = findWindowHeight();\nvar winBot = winTop + winHeight;\nif(posTop < winTop)\nreturn(posTop);\nelse if(posBot > winBot)\n{\nif(e.offsetHeight < winHeight)\nreturn(posTop - (winHeight - e.offsetHeight));\nelse\nreturn(posTop);\n}\nelse\nreturn(winTop);\n}}}\n

To make a tiddler that doesn't have a ~WikiWord as its name, you can enclose the name in double square brackets. After saving the tiddler you can then click on the link to create the new tiddler. NonWikiWordLinks permits tiddlers to be created with names that are made from character sets that don't have upper and lower case.\n\nYou can also use the new tiddler macro, which will allow you to enter any name.

It's easy to create NumberedBulletPoints.\n# Use a single '#' at the start of each line\n# and the tiddler will automatically\n# start numbering your list.\n## If you want a sub-list\n## within any bullets\n## add two '#'s at the start of the lines.\n# When you go back to a single '#'\n# the main numbered list will start up\n# where it left off.\n\nIt's just as simple to do normal BulletPoints.

tcpforwarder - A TCP bouncer that supports IPv4 and IPv6\n\nisicng - ipv6 stack fuzzer\n\nnetcat6 - netcat for IPv6\n\nTODO: Add homepage for each tool and a short paragraph on them.

|Standard Periodic Table (ref. Wikipedia)|c\n|| !1 | !2 |!| !3 | !4 | !5 | !6 | !7 | !8 | !9 | !10 | !11 | !12 | !13 | !14 | !15 | !16 | !17 | !18 |\n|!1|bgcolor(#a0ffa0): @@color(red):H@@ |>|>|>|>|>|>|>|>|>|>|>|>|>|>|>|>||bgcolor(#c0ffff): @@color(red):He@@ |\n|!2|bgcolor(#ff6666): Li |bgcolor(#ffdead): Be |>|>|>|>|>|>|>|>|>|>||bgcolor(#cccc99): B |bgcolor(#a0ffa0): C |bgcolor(#a0ffa0): @@color(red):N@@ |bgcolor(#a0ffa0): @@color(red):O@@ |bgcolor(#ffff99): @@color(red):F@@ |bgcolor(#c0ffff): @@color(red):Ne@@ |\n|!3|bgcolor(#ff6666): Na |bgcolor(#ffdead): Mg |>|>|>|>|>|>|>|>|>|>||bgcolor(#cccccc): Al |bgcolor(#cccc99): Si |bgcolor(#a0ffa0): P |bgcolor(#a0ffa0): S |bgcolor(#ffff99): @@color(red):Cl@@ |bgcolor(#c0ffff): @@color(red):Ar@@ |\n|!4|bgcolor(#ff6666): K |bgcolor(#ffdead): Ca ||bgcolor(#ffc0c0): Sc |bgcolor(#ffc0c0): Ti |bgcolor(#ffc0c0): V |bgcolor(#ffc0c0): Cr |bgcolor(#ffc0c0): Mn |bgcolor(#ffc0c0): Fe |bgcolor(#ffc0c0): Co |bgcolor(#ffc0c0): Ni |bgcolor(#ffc0c0): Cu |bgcolor(#ffc0c0): Zn |bgcolor(#cccccc): Ga |bgcolor(#cccc99): Ge |bgcolor(#cccc99): As |bgcolor(#a0ffa0): Se |bgcolor(#ffff99): @@color(green):Br@@ |bgcolor(#c0ffff): @@color(red):Kr@@ |\n|!5|bgcolor(#ff6666): Rb |bgcolor(#ffdead): Sr ||bgcolor(#ffc0c0): Y |bgcolor(#ffc0c0): Zr |bgcolor(#ffc0c0): Nb |bgcolor(#ffc0c0): Mo |bgcolor(#ffc0c0): Tc |bgcolor(#ffc0c0): Ru |bgcolor(#ffc0c0): Rh |bgcolor(#ffc0c0): Pd |bgcolor(#ffc0c0): Ag |bgcolor(#ffc0c0): Cd |bgcolor(#cccccc): In |bgcolor(#cccccc): Sn |bgcolor(#cccc99): Sb |bgcolor(#cccc99): Te |bgcolor(#ffff99): I |bgcolor(#c0ffff): @@color(red):Xe@@ |\n|!6|bgcolor(#ff6666): Cs |bgcolor(#ffdead): Ba |bgcolor(#ffbfff):^^*1^^|bgcolor(#ffc0c0): Lu |bgcolor(#ffc0c0): Hf |bgcolor(#ffc0c0): Ta |bgcolor(#ffc0c0): W |bgcolor(#ffc0c0): Re |bgcolor(#ffc0c0): Os |bgcolor(#ffc0c0): Ir |bgcolor(#ffc0c0): Pt |bgcolor(#ffc0c0): Au |bgcolor(#ffc0c0): @@color(green):Hg@@ |bgcolor(#cccccc): Tl |bgcolor(#cccccc): Pb |bgcolor(#cccccc): Bi |bgcolor(#cccc99): Po |bgcolor(#ffff99): At |bgcolor(#c0ffff): @@color(red):Rn@@ |\n|!7|bgcolor(#ff6666): Fr |bgcolor(#ffdead): Ra |bgcolor(#ff99cc):^^*2^^|bgcolor(#ffc0c0): Lr |bgcolor(#ffc0c0): Rf |bgcolor(#ffc0c0): Db |bgcolor(#ffc0c0): Sq |bgcolor(#ffc0c0): Bh |bgcolor(#ffc0c0): Hs |bgcolor(#ffc0c0): Mt |bgcolor(#ffc0c0): Ds |bgcolor(#ffc0c0): Rg |bgcolor(#ffc0c0): @@color(green):Uub@@ |bgcolor(#cccccc): Uut |bgcolor(#cccccc): Uuq |bgcolor(#cccccc): Uup |bgcolor(#cccccc): Uuh |bgcolor(#fcfecc): @@color(#cccccc):Uus@@ |bgcolor(#ecfefc): @@color(#cccccc):Uuo@@ |\n\n| !Lanthanides^^*1^^|bgcolor(#ffbfff): La |bgcolor(#ffbfff): Ce |bgcolor(#ffbfff): Pr |bgcolor(#ffbfff): Nd |bgcolor(#ffbfff): Pm |bgcolor(#ffbfff): Sm |bgcolor(#ffbfff): Eu |bgcolor(#ffbfff): Gd |bgcolor(#ffbfff): Tb |bgcolor(#ffbfff): Dy |bgcolor(#ffbfff): Ho |bgcolor(#ffbfff): Er |bgcolor(#ffbfff): Tm |bgcolor(#ffbfff): Yb |\n| !Actinides^^*2^^|bgcolor(#ff99cc): Ac |bgcolor(#ff99cc): Th |bgcolor(#ff99cc): Pa |bgcolor(#ff99cc): U |bgcolor(#ff99cc): Np |bgcolor(#ff99cc): Pu |bgcolor(#ff99cc): Am |bgcolor(#ff99cc): Cm |bgcolor(#ff99cc): Bk |bgcolor(#ff99cc): Cf |bgcolor(#ff99cc): Es |bgcolor(#ff99cc): Fm |bgcolor(#ff99cc): Md |bgcolor(#ff99cc): No |\n\n*Chemical Series of the Periodic Table\n**@@bgcolor(#ff6666): Alkali metals@@\n**@@bgcolor(#ffdead): Alkaline earth metals@@\n**@@bgcolor(#ffbfff): Lanthanides@@\n**@@bgcolor(#ff99cc): Actinides@@\n**@@bgcolor(#ffc0c0): Transition metals@@\n**@@bgcolor(#cccccc): Poor metals@@\n**@@bgcolor(#cccc99): Metalloids@@\n**@@bgcolor(#a0ffa0): Nonmetals@@\n**@@bgcolor(#ffff99): Halogens@@\n**@@bgcolor(#c0ffff): Noble gases@@\n\n*State at standard temperature and pressure\n**those in @@color(red):red@@ are gases\n**those in @@color(green):green@@ are liquids\n**those in black are solids\n

Sometimes text can inadvertently match TiddlyWiki formatting instructions - particularly program code, or text pasted from elsewhere. In these situations you can either use MonospacedText or you can accomplish the same thing without the monospaced effect like this:\n{{{\nThis is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>>\n<nowiki>This is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>></nowiki>\n"""This is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>>"""\n}}}\nWhich displays as:\nThis is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>>\n<nowiki>This is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>></nowiki>\n"""This is a [[link|PlainText]], this is a copyright symbol &copy; and this site is called <<tiddler SiteTitle>>"""\n

To make plugins, stylesheets and templates easier to read, you can use special alternative formatting for monospaced blocks.\n\nIn ~JavaScript code:\n{{{\n//{{{\nvar id = document.getElementById("mainMenu");\n//}}}\n}}}\nIn HTML templates:\n{{{\n<!--{{{-->\n<div id="MainMenu">\n</div>\n<!--}}}-->\n}}}\nIn CSS stylesheets\n{{{\n/*{{{*/\ndiv {color: #ff0000;}\n/*}}}*/\n}}}\nIt will be displayed as:\n//{{{\nvar id = document.getElementById("mainMenu");\n//}}}\n\n<!--{{{-->\n<div id="MainMenu">\n</div>\n<!--}}}-->\n\n/*{{{*/\ndiv {color: #ff0000;}\n/*}}}*/\n

There is a grabthar.php script. This is a proxy that relays song play messages and is part of the Musika proxy at sourcelabs.com.\n\nThere are other "Hammer" testing tools, such as the "Valve Hammer Editor" for the Half-Life game and a LoadBlaster product line from Hammer Technologies to load test data networks.\n\nSo far no one else seems to have used "Grabthar" in conjunction with TCP/IP or fuzzing.

You can now link to [[external sites|http://www.osmosoft.com]] or [[ordinary tiddlers|TiddlyWiki]] with ordinary words, without the messiness of the full URL appearing. Edit this tiddler to see how.\n\nYou can also LinkToFolders.

Project Grabthar is named for ''"Grabthar's Hammer"'' from the movie __Galaxy Quest__. Those familiar with the movie will remember Dr. Lazurus repeatedly saying "//By Grabthar's Hammer, ...//".\n\nWhile initial versions of this tool will be more akin to a small mallet, over time it will mature into a project worthy of it's mighty name yet retaining a sense of humor.\n\nFor a high level overview of this project please see [[Goals]].\n\nA more detailed and ordered description of functionality is available as [[Objectives]].\n\nSee [[Status]] for where we are today.\n\nFor even more [[Details]] try:\n* [[Roadmap]] for a loose timeline of when each feature will be implemented\n* [[Screenshots]] for a view of how this looks from the user's perspective\n* [[Downloads]] for links to the code, virtual machine images and other files\n* [[Tutorials]] for descriptive texts to step you through initial testing

What? You expected to see pictures? Hmm.\n\nGrabthar is a command line tool. This means any screen shots would be rather boring images of several lines of text. So, without the bothersome overhead of large image files, here are actual lines from running the tool.\n\nThe purpose of Grabthar is to discover vulnerabilities in the network stack, so we typically launch Grabthar on a probe system and direct the network packets to the test system. VMware makes this much easier.\n\nExample #1: A simple probe using IPv4 first, then IPv6.\n\nExample #2: OpenBSD ICMPV6 Packet Handling Remote Buffer Overflow Vulnerability\nBugtraq ID: 22901\nCVE: CVE-2007-1365\nOpenBSD is prone to a remote buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

<<search>><<closeAll>><<permaview>><<newTiddler>><<newJournal 'YYYY0MM0DD - DDD'>><<saveChanges>><<slider chkSliderOptionsPanel OptionsPanel 'options »' 'Change TiddlyWiki advanced options'>>

Hammering IPv4 and IPv6 with ''//Grabthar's Hammer//'' since 2007

Project Grabthar\n

From the article __Everything you need to know about IPv6 __ By Iljitsch van Beijnum, 7 March 2007, http://arstechnica.com/articles/paedia/IPv6.ars\n\nAlthough in most regards, IPv6 is still IP and works pretty much the same as IPv4, the new protocol departs from IPv4 in some ways. With IPv4, you need a DHCP server to tell you your address if you don't want to resort to manual configuration. This works very well if there's a single DHCP server, but not so much when there's more than one and they supply conflicting information. It can also be hard to get a system to have the same address across reboots with DHCP.\n\nWith IPv6, DHCP is largely unnecessary because of stateless autoconfiguration. This is a mechanism whereby routers send out "router advertisements" (RAs) that contain the upper 64 bits of an IPv6 address, and hosts generate the lower 64 bits themselves in order to form a complete address.\n\nTraditionally, the bottom 64 bits of an IPv6 address are generated from a MAC address by flipping a bit and adding the bits ff:fe in the middle. So the Ethernet MAC address 00:0a:95:f5:24:6e results in 20a:95ff:fef5:246e as the lower 64 bits of an IPv6 address, called the "interface identifier" in IPv6 parlance. This way, if all the routers send out the same prefix for the upper 64 bits, the host will always configure the same IPv6 address for itself. No configuration is required, either on the host or a DHCP server. Alternatively, a host may generate its IPv6 address using a random number so its MAC address remains hidden from the rest of the Internet. Windows uses this type of addresses for outgoing sessions to aid privacy. Other operating systems can also generate these temporary addresses (a new one is generated every 24 hours) but don't do so by default.\n\nWhen a router sends out several address prefixes, or several routers send out different address prefixes, hosts simply create addresses from each of those prefixes. Routers can make the hosts connected to them renumber their IPv6 addresses by removing the old prefix and advertising a new one. When done right, this is completely seamless.\n\nAlthough the DHCPv6 protocol (the IPv6 version of DHCP) can give out IPv6 addresses the same way IPv4 DHCP servers give out IPv4 addresses, I haven't encountered any DHCPv6 servers or DHCPv6 clients that support this capability. With IPv6, DHCP is mostly used to distribute additional information, such as DNS server addresses, although there will be a way to do this through router advertisements as well soon, further diminishing the need for DHCP in IPv6.

!Header 1\n!!Header 2\n!!!Header 3\n!!!!Header 4\n!!!!!Header 5\n

*sample:\n|!th1111111111|!th2222222222|\n|>| colspan |\n| rowspan |left|\n|~| right|\n|bgcolor(#a0ffa0):colored| center |\n|caption|c\n*another sample: see PeriodicTable.\nFor advanced effects, you can control the CSS style of a table by adding a row like this:\n{{{\n|cssClass|k\n}}}\n

To hide text within a tiddler so that it is not displayed you can wrap it in {{{/%}}} and {{{%/}}}. It can be a useful trick for hiding drafts or annotating complex markup. Edit this tiddler to see an example.\n/%This text is not displayed\nuntil you try to edit %/

''TiddlyWiki is a reusable non-linear personal web notebook''\n\nWelcome to TiddlyWiki, a free ~MicroContent ~WikiWikiWeb created by Jeremy Ruston and a busy Community of independent developers. It's written in HTML, CSS and ~JavaScript to run on any modern browser without needing any server side logic. It allows anyone to create personal self contained hypertext documents that can be posted to a web server, sent by email or kept on a USB thumb drive to make a ~WikiOnAStick. Because it doesn't need to be installed and configured it makes a great guerilla wiki. This is revision <<version>> of TiddlyWiki (see recent changes), and is published under an Open Source License.\n\nThe main site is [[www.tiddlywiki.com|http://www.tiddlywiki.com]]. Clicking on this link should open the site in a new tab. The community site is [[www.tiddlywiki.org|http://www.tiddlywiki.org]], which is actually a trac server hosting the project. Since TiddlyWiki operates on a single file it's not appropriate for collaboration.\n\nSee also GettingStarted

!Covert channel tool hides data in IPv6\n\nBy: Robert Lemos\n\nAnnounced at the DEFCON hacking conference, a tool dubbed VoodooNet hides a small amount of data in IPv6 error messages, where most security devices do not even look.\n\nhttp://www.securityfocus.com/news/11406\n\nThe tool, also called v00d00n3t, was presented by Robert Murphy at DefCon 2006.\n\nFrom the article:\n<<<\nDan Kaminsky, a well-known network security expert, points out that covert channels are nothing new, and while an implementation using ICMP packets may not have been created yet, sending data using 6to4 tunneling has been around for a few years.\n\n"Yes, firewalls need to be more aware that these transition technologies exist and need to handle them better," Kaminsky said. "But ICMP tunnels have existed for, what, 10 or 15 years? Doing it using IPv6 is not difficult. You break into a box and hit IPv6 enable."\n<<<

Sometimes it's handy to be able to write ~WikiWords without them being recognised as links (for people's names, for instance). You can do this by preceding the ~WikiWord with a tilde ({{{~}}}). For example, ~JamesBond, ~JavaScript and ~TiddlyWiki

Type the text for 'YYYY0MM0DD'

This is a tiddler to remove all the formatting tiddlers from the list of orphans.\nBlockQuotes BulletPoints CustomCssClass EmbeddedImages ExtendedFormatting HorizontalRules HtmlEntities LinkToFolders MonospacedText NonWikiWordLinks NumberedBulletPoints PeriodicTable PlainText PluginFormatting PrettyLinks SubHeadings [[Tables]]\n TiddlerComments WikiWordEscape

This is a tiddler to remove the name from the list of tiddlers that have links to them but are not defined.