Happy World IPv6 Day From the Nmap Project!

[Fyodor <fyodor () insecure org>]

Hi Folks.  You have probably heard that today is World IPv6 Day, with
sites like Google, Facebook, and Yahoo publishing IPv6 records for
their main web sites.  I'm happy to report that the Nmap Project is
celebrating in several ways:

==Scanme Updated to IPv6==

You probably know that we run the machine scanme.nmap.org as a system
people are allowed to use as a target for test scans and the like.
That system now has native IPv6 support.  So if you have never
performed an IPv6 port scan, you can do so with a command like:

nmap -6 -v scanme.nmap.org

We also added a DNS record for scanmev6.nmap.org, which only has an
IPv6 address (no IPv4).  This can help for tools which might otherwise
use Scanme's IPv4 address by default rather than IPv6.  For example,
you can insure that your web browser is connecting to the IPv6 version
of the Scanme web site by visiting:

http://scanmev6.nmap.org/

You might expect that to fail if you haven't done any IPv6 setup, but
you might be surprised!  Many operating systems can automatically set
up various types of IPv6 tunnels as needed.  Give it a try!

==Nmap Web Sites==

All of our main web sites (Nmap.Org, Insecure.Org, SecLists.Org,
SecTools.Org) are now reachable by IPv6.

I've noticed that some other participants have been using "vanity"
IPv6 addresses:

www.facebook.com - 2620:0:1c18:0:face:b00c::
www.cisco.com - 2001:420:80:1:c:15c0:d06:f00d
www.bbc.co.uk - 2001:4b10:bbc::2

So we're proud to fly our 2600 flag!

nmap.org - 2600:3c01::f03c:91ff:fe96:967c

Admittedly that is a coincidence, but we're still happy about it :).

==Nmap Code==

We're not announcing the incorporation of IPv6 support into Nmap today
for one reason: we already did that in 2002 :).  Just add the -6
option to your command. Basic TCP port scanning and host discovery were
added back then, and we included IPv6 support for newer features such
as version detection, Ncat, and the Nmap Scripting Engine as they were
released.

While Nmap has long included basic IPv6 support, there have been
important limitations.  In particular, raw packet scans (SYN scan, UDP
scan, ICMP ping packets, etc.) and traceroute were not supported.  I'm
happy to announce that we removed those limitation today!  You can
find details and download URLs for our special IPv6 test release (Nmap
5.52.IPv6.Beta2) here:

http://seclists.org/nmap-dev/2011/q2/866

IPv6 OS detection isn't included yet, but we're working hard on it!

Even if you aren't interested in the IPv6 support for some reason,
that release includes many other new features that haven't made it to
a general release yet.

Enjoy the new code and web sites, and I'd like to wish every one of
you a very happy IPv6 Day!  May your scans be lightning quick and your
IPv6 configuration secure!

Cheers,
Fyodor
_______________________________________________
Sent through the nmap-hackers mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-hackers
Archived at http://seclists.org/nmap-hackers/