Mi Scusi, My SCSI: Abusing iSCSI Target Server
Summary
This article describes a technique for impersonating an iSCSI initiator to access data on a shared virtual hard disk by enumerating correct connection strings for an iSCSI target server. The research builds upon prior work in the iSCSI security space.
IFF Assessment
FOE
This article details a method to abuse iSCSI target servers, which can lead to unauthorized data access, posing a risk to defenders.
Defender Context
Defenders should be aware of the potential for unauthorized access to storage resources by impersonating iSCSI initiators. Implementing proper authentication and network segmentation for iSCSI traffic is crucial to mitigate this risk.