Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit)

[Marc Heuse <mh () mh-sec de>]

And do add to this, this presentation:
https://conference.hitb.org/hitbsecconf2012kul/materials/D1T2%20-%20Marc%20Heuse%20-%20IPv6%20Insecurity%20Revolutions.pdf

gives in the 2nd half a step-by-step guide on how to identify and scan
remote IPv6 networks.

A second tool to perform remote scanning is mentioned there: alive6
which is part of the thc-ipv6 toolkit available at www.thc.org/thc-ipv6.
plus 50 more tools for IPv6 (in)security.

enjoy!

Greets,
Marc

--
Marc Heuse
www.mh-sec.de

PGP: FEDD 5B50 C087 F8DF 5CB9  876F 7FDD E533 BF4F 891A


On 17.02.2013 01:16, Fernando Gont wrote:
> Folks,
>
> A while ago we had published an IETF Internet-Draft about IPv6 Network
> Reconnaissance ("Network Reconnaissance in IPv6 Networks", available at:
> <http://tools.ietf.org/html/draft-ietf-opsec-ipv6-host-scanning-00>).
>
> Our scan6 tool (part of the SI6 Networks' IPv6 toolkit
> <http://www.si6networks.com/tools/ipv6toolkit>) allows you to play with
> the different IPv6 address scanning techniques.
>
> It's simple to play/try: Find an IPv6 node (e.g., "dig DOMAIN aaaa", and
> figure out the pattern... or simply scan for the predefined scan
> patterns that scan6 implements). "traceroute6 DOMAIN" will give you the
> IPv6 addresses of the intervening routers (which generally follow very
> easy/straightforward patterns).
>
> We're really eager to get feedback from the community... there's still
> lots to research on this subject, so... the more input we get form the
> community (whether on-list or off-list), the better the next releases of
> scan6 will be. (Have we missed any patterns? How about other
> virtualization technologies that scan6 does not yet support? etc.)
>
> As you probably know, we typically discuss IPv6 security issues on the
> IPv6 hackers mailing-list
> <http://www.si6networks.com/community/mailing-lists.html> -- feel free
> to join -- it's a low-noise and very focused list.
>
> P.S.: Please do read the scan6 manual page before using the tool .. you
> might cause trouble to the target network and/or to your own network.
>
> Thanks!
>
> Best regards,


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/