SI6 Networks' IPv6 Toolkit
A security assessment and troubleshooting tool for the IPv6 protocols
The SI6 Networks' IPv6 toolkit is a set of IPv6 security assessment and trouble-shooting tools. It can be leveraged to perform security assessments of IPv6 networks, assess the resiliency of IPv6 devices by performing real-world attacks against them, and to trouble-shoot IPv6 networking problems. The tools comprising the toolkit range from packet-crafting tools to send arbitrary Neighbor Discovery packets to the most comprehensive IPv6 network scanning tool out there (our scan6 tool).
The SI6 Networks' IPv6 toolkit is developed by Fernando Gont for SI6 Networks..
This release includes:
- Many bug fixes
The following platforms are supported: FreeBSD, NetBSD, OpenBSD, Ubuntu, Debian GNU/Linux, Debian GNU/kfreebsd, Solaris, Gentoo Linux, and Mac OS.
The GIT repository for the SI6 Networks' IPv6 toolkit is: https://github.com/fgont/ipv6toolkit.git
IPv6 Security Training Courses
Development of the ipv6-toolkit is partially supported through our IPv6 security training courses. Please consider attending one of our upcoming IPv6 security courses.
List of Tools
- addr6: An IPv6 address analysis and manipulation tool.
- flow6: A tool to perform a security asseessment of the IPv6 Flow Label.
- frag6: A tool to perform IPv6 fragmentation-based attacks and to perform a security assessment of a number of fragmentation-related aspects.
- icmp6: A tool to perform attacks based on ICMPv6 error messages.
- jumbo6: A tool to assess potential flaws in the handling of IPv6 Jumbograms.
- na6: A tool to send arbitrary Neighbor Advertisement messages.
- ni6: A tool to send arbitrary ICMPv6 Node Information messages, and assess possible flaws in the processing of such packets.
- ns6: A tool to send arbitrary Neighbor Solicitation messages.
- ra6: A tool to send arbitrary Router Advertisement messages.
- rd6: A tool to send arbitrary ICMPv6 Redirect messages.
- rs6: A tool to send arbitrary Router Solicitation messages.
- scan6: An IPv6 address scanning tool.
- tcp6: A tool to send arbitrary TCP segments and perform a variety of TCP-based attacks.
- Gont, F. 2012. Security Assessment of IPv6 Neighbor Discovery Implementations. [.pdf]
- A number of IETF RFCs and Internet-Drafts on the the topic of IPv6 security can be a good companion to our IPv6 toolkit.
In the Press
These articles feature or mention the SI6 Networks' IPv6 Toolkit: