Newest RA Flood Kills iPad Mini

The new version, thc-ipv6-2.3, came out yesterday.

The previous RA flood tool sent out packets like this, with "Router Lifetime" 65535:

The new version shortens the "Router Lifetime" to 3 seconds:

This makes a big difference when attacking the iPad Mini! I used my Android phone as an access point, using 802.11g.

In all cases I ran a fake_router6 process to simulate a real router on the network in addition to the flood_router26 attack.

Old Flood: Limetime = 65535 Sec

This flood drives the CPU usage to nearly 100% on the iPad Mini:

But the iPad Mini does not crash! As soon as the flood stops, it returns to normal. I had that result for a flood of three minutes, five times in a row.

New Flood: Lifetime = 3 Sec

This flood does not drive the CPU as high; it varies around 50%.

But it either kills or freezes the iPad Mini almost every time!

Here are my results for 11 floods with a maximum duration of three minutes.

Red bar: iPad Mini crashed and spontanously rebooted.

Blue bar: ipad Mini froze, becoming unresponsive to touchscreen and buttons.

Green bar: iPad Mini did not crash or freeze.

Posted 8 am 5-4-13 by Sam Bowne