CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutSign UpSign In
rapid7

CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!

GitHub Repository: rapid7/metasploit-framework
Path: blob/master/documentation/modules/auxiliary/scanner/discovery/ipv6_neighbor.md
Views: 1904

Description

This auxiliary module probes the local network for IPv6 hosts that respond to Neighbor Solicitations with a link-local address. This module, like the arp_sweep one, will generally only work within the attacking machine’s broadcast domain. It serves the dual-purpose of showing what hosts are online similar to arp_sweep and then performs the IPv6 Neighbor Discovery.

Verification Steps

  1. Do: use auxiliary/scanner/discovery/ipv6_neighbor

  2. Do: set RHOSTS [IP]

  3. Do: set SHOST [IP]

  4. Do: set SMAC [MAC]

  5. Do: set THREADS [number of threads]

  6. Do: run

Scenarios

msf > use auxiliary/scanner/discovery/ipv6_neighbor msf auxiliary(ipv6_neighbor) > set RHOSTS 192.168.1.2-254 RHOSTS => 192.168.1.200-254 msf auxiliary(ipv6_neighbor) > set SHOST 192.168.1.101 SHOST => 192.168.1.101 msf auxiliary(ipv6_neighbor) > set SMAC d6:46:a7:38:15:65 SMAC => d6:46:a7:38:15:65 msf auxiliary(ipv6_neighbor) > set THREADS 55 THREADS => 55 msf auxiliary(ipv6_neighbor) > run [*] IPv4 Hosts Discovery [*] 192.168.1.10 is alive. [*] 192.168.1.11 is alive. [*] 192.168.1.2 is alive. [*] 192.168.1.69 is alive. [*] 192.168.1.109 is alive. [*] 192.168.1.150 is alive. [*] 192.168.1.61 is alive. [*] 192.168.1.201 is alive. [*] 192.168.1.203 is alive. [*] 192.168.1.205 is alive. [*] 192.168.1.206 is alive. [*] 192.168.1.99 is alive. [*] 192.168.1.97 is alive. [*] 192.168.1.250 is alive. [*] IPv6 Neighbor Discovery [*] 192.168.1.69 maps to IPv6 link local address fe80::5a55:caff:fe14:1e61 [*] 192.168.1.99 maps to IPv6 link local address fe80::5ab0:35ff:fe6a:4ecc [*] 192.168.1.97 maps to IPv6 link local address fe80::7ec5:37ff:fef9:a96a [*] Scanned 253 of 253 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(ipv6_neighbor) >