The 2022 Pwnie Winner For Most Under-Hyped Research

Spoofing IP with IPIP

Researcher Name: Yannay Livneh / PoC||GTFO 21:03

Yannay scanned the Internet for machines that both allowed IP over IP tunneling and had no egress filtering, allowing him to inject raw IP packets into the Internet like we did in the early nineties. He then played “pass-the-parcel” by chaining up these hosts, and left the packets as a PCAP-NG polyglot in pocorgtfo21.pdf.