SD-WAN New Hop

SD-WAN New Hop project overview and releases.

Software-defined networking in a wide area network (SD-WAN) quickly becomes very popular in Enterprises. Vendors promises "on-the-fly agility, simplicity, security and automation" and many other benefits. What do you know about SD-WAN? What the "security" means from hand-on perspective? Are present SD-WAN solutions really secure? The goal of this project is to give answers on these questions by analysing different SD-WAN solutions from the adversaries' point of view.

Papers

Practical Security Assessment of SD-WAN Implementations 

SD-WAN Internet Census (preprint)

SD-WAN Threat Landscape (preprint)

Resources

SD-WAN Census Queries List

SD-WAN Census Version Leakage List

SD-WAN Security Assessment: The First Hours

Public Reports

Citrix SD-WAN Center Security Findings

Citrix NetScaler SD-WAN Security Findings

Silverpeak EdgeConnect Multiple Vulnerabilities

Riverbed SteelConnect Vulnerabilities

Viprinet Virtual VPN Hub Stored XSS

Tools

SD-WAN Harvester

SD-WAN Infiltrator

Slides

SD-WAN Internet Census. Zero Nights 2018

"WebGoat.SDWAN.Net" in Depth. POC 2018

Practical Threat Modeling for SD-WAN. Area 41 2018

Too Soft[ware Defined] Networks: SD-WAN Vulnerability Assessment. Black Hat USA 2018

Talks

SD-WAN a New Hop. How to hack software defined network and keep your sanity? 35C3

How To Hack SD-WAN And Keep Your Sanity? Ekoparty 2018

Contributors

Sergey Gordeychik

Alex Timorin

Denis Kolegov

Maxim Gorbunov

Nikolay Tkachenko

Nikita Oleksov

Oleg Broslavsky

Antony Nikolaev

Project updates

http://www.scada.sl/search/label/sd-wan

As presented by Denis Kolegov, Aleksander Timorin and Sergey Gordeychik at Area 41, BlackHat, Ekoparty, 35C3.

Tools

Too soft[ware defined] networks SD-Wan vulnerability assessment from Sergey Gordeychik

More to come.

Enjoy!