Infrastructure Layer

Time Travel Attack


The Time Travel Gremlin modifies the system time of the target’s operating system. This Gremlin also optionally blocks all traffic over the standard NTP port, which is equivalent to running a Blackhole Gremlin against outgoing port 123.

Linux

The Time Travel Gremlin issues a settimeofday syscall. See settimeofday(2)

This Gremlin requires the SYS_TIME capability, which is enabled for Gremlin by default at installation time. See capabilities(7)

Options

ParameterFlagRequiredDefaultVersionDescription
NTP-nFalseFalse1.5.0Disable NTP from correcting systemtime.
Offset-o intFalse864001.5.0The offset to the current time (seconds).
Length-l intFalse601.5.0The length of the attack (seconds).