IPv6 Network

What tools to assess the security of an IPv6 network

SI6 Network offers a free, open source kit for this. It is supported on major open source operating systems. The tools in this kit are presented here using concrete examples to help understand the techniques currently used by providers and intrusion test specialists, and to improve the security and resiliency of IPv6 networks.

Only IPv6 toolkit available for testing IPv6 networks. This suite focused on a few specific attack vectors and made their exploitation quite simple: the user needed to specify only a few key options, such as the target IPv6 address, and the tools did the rest. But this simplicity has also reduced the flexibility of THC-IPv6.

When it was launched in 2011, the SI6 Networks kit filled a void by evaluating IPv6 deployments, including for failures not anticipated by the creators of the kit.This kit was born from an effort to help OEMs improve the security and resilience of their products, and administrators to validate and test their IPv6 deployments.

This objective implicitly defined 4 objectives for the development of the kit.Then the kit had to be provided as free software, so that a large community could benefit from it. Then he demanded clear and effective documentation. Finally, the kit had to support as many platforms as possible. This last objective was not only motivated by the idea of ​​supporting the widest possible community: it was also intended to help improve the quality and portability of the code.

The kit currently supports most BSD operating systems, Linux distributions, OS X, and OpenSolaris. It is integrated with the packaging system present in most of these operating systems and can be installed like any other supported application. For example, Ubuntu users can install it through the sudo apt-get install ipv6toolkit command .
Kit Contents

All of SI6's IPv6 kit tools come with complete documentation, which can be accessed via the must-have man. Each tool in the kit has its own short documentation, scan6 --help , for example.
Most of the tools in the kit focus on each of the different IPv6 protocol messages. For example, the tools ns6, na6, rs6, ra6 and rd6 make it possible to send arbitrary messages corresponding to the discovery of the neighborhood on an IPv6 network.

Source: Network Security