Nmap Development mailing list archives
Re: NSE scripts for scanning IPv6 sub-nets
From: John Bond <john.r.bond () gmail com>
Date: Mon, 16 Dec 2013 13:17:18 +0100
Thanks Raul, Its been in the back of my mind to make http://tools.ietf.org/html/draft-ietf-opsec-ipv6-host-scanning-02 into a script for, well for too long. Glad someone else got around to it. Ill check these out tonight On 16 December 2013 04:55, Raul Fuentes <ra.fuentess.sam () gmail com> wrote:
Hello, I was working with Nmap for my master's thesis which consist on exploring IPv6 sub-nets, the work were based on the ideaas proposed on http://tools.ietf.org/html/draft-ietf-opsec-ipv6-host-scanning-02 As Nmap was key for my thesis I took the choice of made my work with the Creative Commons license and the nse scripts with the 6.20 nmap licensing. On general, I developed the next scripts: 1 - Low-bytes - Be able to scan ::1 to X:X:X:X::FFFF:FFFF 2 - Map 4to6: Be able to scan 192.168.1.1 as X:X:X:X::192.168.1.1 3 - SLAAC: Be able to scan EUI-64 address and popular VMs (work until 24 bits) 4 - Woords: A simple dictionary of the low parts (defualt words like C0CA, BEEF, etc) 5 - A technique proposed by myself for retrieve syubnet info from DHCPv6 stateful servers. Personally, I like my final results, the scripts are useful as they reduce the exploration from 64 bits to 24 or less (however there is real risk of DoS as http://tools.ietf.org/html/rfc6583 explain) . Each set of scripts can be work on any combo and their arguments give good flexibility (or I believed it). The current repository is: https://code.google.com/p/itsis-mx/ and the thesis (which have the best documented part of the work) is in the same repository with this url: https://itsis-mx.googlecode.com/git/Thesis-spanish.pdf (appendix C, p. 91 hast the most practical info for the scripts) My thesis and the first page of the repository are on Spanish, but the codes are written on English. If the community find those useful I'll begin to work the Wikis for translate the most useful part of the thesis. -- Sincerely, Eng. Raul A. Fuentes Samaniego _______________________________________________ Sent through the dev mailing list http://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
_______________________________________________ Sent through the dev mailing list http://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- NSE scripts for scanning IPv6 sub-nets Raul Fuentes (Dec 15)
- Re: NSE scripts for scanning IPv6 sub-nets John Bond (Dec 16)
- Re: NSE scripts for scanning IPv6 sub-nets David Fifield (Dec 28)