Home page logo

nmap-dev logo Nmap Development mailing list archives

NSE scripts for scanning IPv6 sub-nets
From: Raul Fuentes <ra.fuentess.sam () gmail com>
Date: Sun, 15 Dec 2013 21:55:39 -0600

Hello, I was working with Nmap for my master's thesis which consist on
 exploring IPv6 sub-nets, the work were based on the ideaas proposed on

As Nmap was key for my thesis I took the choice of made  my work  with the
Creative Commons license  and the nse scripts with the 6.20 nmap licensing.

On general, I developed the next scripts:

1 -  Low-bytes - Be able to scan ::1 to X:X:X:X::FFFF:FFFF
2 -  Map 4to6:  Be able to scan as X:X:X:X::
3 -  SLAAC: Be able to scan EUI-64 address and popular VMs (work until 24
4 -  Woords: A simple dictionary of the low parts (defualt words like C0CA,
BEEF, etc)
5 - A technique proposed by myself for retrieve syubnet info from DHCPv6
stateful servers.

Personally, I like my final results, the scripts are useful as they reduce
the exploration from 64 bits to 24 or less  (however there is real risk of
DoS as http://tools.ietf.org/html/rfc6583 explain) . Each set of scripts
 can be work on any combo and their arguments give good flexibility (or  I
believed it).

The current repository is: https://code.google.com/p/itsis-mx/ and the
thesis (which have the best documented part of the work)  is in the same
repository with this url:
https://itsis-mx.googlecode.com/git/Thesis-spanish.pdf (appendix C, p. 91
 hast the most practical info for the scripts)

My thesis and the first page of the repository are on Spanish, but the
codes are written on English.  If the community find those useful I'll
begin to work the Wikis for translate the most useful part of the thesis.

Sincerely, Eng. Raul A. Fuentes Samaniego
Sent through the dev mailing list
Archived at http://seclists.org/nmap-dev/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]