mailing list archives
Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit)
From: Marc Heuse <mh () mh-sec de>
Date: Sun, 17 Feb 2013 09:08:06 +0100
And do add to this, this presentation:
gives in the 2nd half a step-by-step guide on how to identify and scan
remote IPv6 networks.
A second tool to perform remote scanning is mentioned there: alive6
which is part of the thc-ipv6 toolkit available at www.thc.org/thc-ipv6.
plus 50 more tools for IPv6 (in)security.
PGP: FEDD 5B50 C087 F8DF 5CB9 876F 7FDD E533 BF4F 891A
On 17.02.2013 01:16, Fernando Gont wrote:
A while ago we had published an IETF Internet-Draft about IPv6 Network
Reconnaissance ("Network Reconnaissance in IPv6 Networks", available at:
Our scan6 tool (part of the SI6 Networks' IPv6 toolkit
<http://www.si6networks.com/tools/ipv6toolkit>) allows you to play with
the different IPv6 address scanning techniques.
It's simple to play/try: Find an IPv6 node (e.g., "dig DOMAIN aaaa", and
figure out the pattern... or simply scan for the predefined scan
patterns that scan6 implements). "traceroute6 DOMAIN" will give you the
IPv6 addresses of the intervening routers (which generally follow very
We're really eager to get feedback from the community... there's still
lots to research on this subject, so... the more input we get form the
community (whether on-list or off-list), the better the next releases of
scan6 will be. (Have we missed any patterns? How about other
virtualization technologies that scan6 does not yet support? etc.)
As you probably know, we typically discuss IPv6 security issues on the
IPv6 hackers mailing-list
<http://www.si6networks.com/community/mailing-lists.html> -- feel free
to join -- it's a low-noise and very focused list.
P.S.: Please do read the scan6 manual page before using the tool .. you
might cause trouble to the target network and/or to your own network.