full-disclosure - Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <51208FE6.9000309@mh-sec.de>
Date: Sun, 17 Feb 2013 09:08:06 +0100
From: Marc Heuse <mh@...sec.de>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>, 
	"bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>
Subject: Re: Scanning the IPv6 Internet with the scan6
	tool (SI6 IPv6 toolkit)

And do add to this, this presentation:
https://conference.hitb.org/hitbsecconf2012kul/materials/D1T2%20-%20Marc%20Heuse%20-%20IPv6%20Insecurity%20Revolutions.pdf

gives in the 2nd half a step-by-step guide on how to identify and scan
remote IPv6 networks.

A second tool to perform remote scanning is mentioned there: alive6
which is part of the thc-ipv6 toolkit available at www.thc.org/thc-ipv6.
plus 50 more tools for IPv6 (in)security.

enjoy!

Greets,
Marc

--
Marc Heuse
www.mh-sec.de

PGP: FEDD 5B50 C087 F8DF 5CB9  876F 7FDD E533 BF4F 891A


On 17.02.2013 01:16, Fernando Gont wrote:
> Folks,
> 
> A while ago we had published an IETF Internet-Draft about IPv6 Network
> Reconnaissance ("Network Reconnaissance in IPv6 Networks", available at:
> <http://tools.ietf.org/html/draft-ietf-opsec-ipv6-host-scanning-00>).
> 
> Our scan6 tool (part of the SI6 Networks' IPv6 toolkit
> <http://www.si6networks.com/tools/ipv6toolkit>) allows you to play with
> the different IPv6 address scanning techniques.
> 
> It's simple to play/try: Find an IPv6 node (e.g., "dig DOMAIN aaaa", and
> figure out the pattern... or simply scan for the predefined scan
> patterns that scan6 implements). "traceroute6 DOMAIN" will give you the
> IPv6 addresses of the intervening routers (which generally follow very
> easy/straightforward patterns).
> 
> We're really eager to get feedback from the community... there's still
> lots to research on this subject, so... the more input we get form the
> community (whether on-list or off-list), the better the next releases of
> scan6 will be. (Have we missed any patterns? How about other
> virtualization technologies that scan6 does not yet support? etc.)
> 
> As you probably know, we typically discuss IPv6 security issues on the
> IPv6 hackers mailing-list
> <http://www.si6networks.com/community/mailing-lists.html> -- feel free
> to join -- it's a low-noise and very focused list.
> 
> P.S.: Please do read the scan6 manual page before using the tool .. you
> might cause trouble to the target network and/or to your own network.
> 
> Thanks!
> 
> Best regards,


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/