SI6 Networks' IPv6 Toolkit

A security assessment and troubleshooting tool for the IPv6 protocols

The SI6 Networks' IPv6 toolkit is a set of IPv6 security assessment and trouble-shooting tools. It can be leveraged to perform security assessments of IPv6 networks, assess the resiliency of IPv6 devices by performing real-world attacks against them, and to trouble-shoot IPv6 networking problems. The tools comprising the toolkit range from packet-crafting tools to send arbitrary Neighbor Discovery packets to the most comprehensive IPv6 network scanning tool out there (our scan6 tool).


IPv6 toolkit philosophy

Developers

The SI6 Networks' IPv6 toolkit is developed by Fernando Gont for SI6 Networks..


Latest release

The SI6 Networks' IPv6 toolkit v2.0beta is available at: ipv6toolkit-v2.0beta.tar.gz. A GPG-signed copy of the toolkit is available at: ipv6toolkit-v2.0beta.tar.gz.gpg.

This release includes:

  • Many bug fixes

Supported platforms

The following platforms are supported: FreeBSD, NetBSD, OpenBSD, Ubuntu, Debian GNU/Linux, Debian GNU/kfreebsd, Solaris, Gentoo Linux, and Mac OS.


GIT repository

The GIT repository for the SI6 Networks' IPv6 toolkit is: https://github.com/fgont/ipv6toolkit.git


IPv6 Security Training Courses

Development of the ipv6-toolkit is partially supported through our IPv6 security training courses. Please consider attending one of our upcoming IPv6 security courses.


Hacking IPv6 Networks Training Courses

List of Tools

  • addr6: An IPv6 address analysis and manipulation tool.
  • flow6: A tool to perform a security asseessment of the IPv6 Flow Label.
  • frag6: A tool to perform IPv6 fragmentation-based attacks and to perform a security assessment of a number of fragmentation-related aspects.
  • icmp6: A tool to perform attacks based on ICMPv6 error messages.
  • jumbo6: A tool to assess potential flaws in the handling of IPv6 Jumbograms.
  • na6: A tool to send arbitrary Neighbor Advertisement messages.
  • ni6: A tool to send arbitrary ICMPv6 Node Information messages, and assess possible flaws in the processing of such packets.
  • ns6: A tool to send arbitrary Neighbor Solicitation messages.
  • ra6: A tool to send arbitrary Router Advertisement messages.
  • rd6: A tool to send arbitrary ICMPv6 Redirect messages.
  • rs6: A tool to send arbitrary Router Solicitation messages.
  • scan6: An IPv6 address scanning tool.
  • tcp6: A tool to send arbitrary TCP segments and perform a variety of TCP-based attacks.

Related Documents

  • Gont, F. 2012. Security Assessment of IPv6 Neighbor Discovery Implementations. [.pdf]
  • A number of IETF RFCs and Internet-Drafts on the the topic of IPv6 security can be a good companion to our IPv6 toolkit.

In the Press

These articles feature or mention the SI6 Networks' IPv6 Toolkit: