ipv6toolkit v1.5.3

Set of IPv6 security assessment tools

- **addr6** is an IPv6 address analysis and manipulation tool. Given  a  list
of IPv6 addresses, it can filter such list based on different criteria,
such as IPv6 address  type,  IPv6  address  scope,  IPv6  prefix,  etc.
Additionally,  given  a  list  of  IPv6  addresses  addr6  can  produce
statistics on such addresses, including address scopes, types, and type
of IPv6 interface identifier.  addr6 can also analyze a single address,
producing  script-friendly  output,  such  that  its  analysis  can  be
leveraged by other tools or scripts.

- **flow6**   allows   the  security  assessment  of  the  IPv6  Flow  Label.
Essentially, it can be leveraged to assess the  Flow  Label  generation
policy of a terget implementation.

- **frag6**  is  a  security  assessment  tool  for  the  IPv6  fragmentation
mechanism. It allows the exploitation of  fragmentation-based  attacks,
and  can  also  be  employed  to  assess  the  Fragment  Identification
generation policy, assess support for IPv6 atomic fragments, etc.

- **icmp6** is a security assessment tool for the  ICMPv6  protocol.  It  can
easily  produce  arbitrary  ICMPv6  error  messages,  and  includes the
capability to generate such messages in response to  received  traffic.
icmp6  can  also  be  used to send crafted ICMPv6 messages of arbitrary
type/code combinations.

- **jumbo6** is a secuity assessment tool for IPv6 Jumbograms.

- **na6** is a security assessment tool for attack vectors based on  Neighbor
Advertisement messages (including Neighbor Cache poisoning attacks, DAD
attacks, etc.).

- **ni6**  is  a  security  assessment   tool   for   attacks   vectors   and
reconnaissance techniques based on ICMPv6 Node Information messages.

- **ns6**  is a security assessment tool for attack vectors based on Neighbor
Solicitation messages  (including  Neighbor  Cache  poisoning  attacks,
Neighbor Cahe exhaustion attacks, etc.).

- **ra6**  is  a  security assessment tool for attack vectors based on Router
Advertisement messages (including various  types  of  fooding  attacks,
man-in-the-middle attacks, and Denial of Service attacks, etc.).

- **rd6**  is  a  security assessment tool for attack vectors based on ICMPv6
Redirect messages.  It can easily  produce  arbitrary  ICMPv6  Redirect
messages, and also includes the capability to generate such messages in
response to received traffic.

- **rs6** is a security assessment tool for attack vectors  based  on  Router
Solicitation messages.

- **scan6**  is a full-fledged IPv6 address scanning tool, which can leverage
specific IPv6 address patterns to greatly reduce the search  space  for
"alive" nodes.

- **tcp6** is a security assessment tool for attack vectors based on TCP/IPv6
packets. It can be easily employed to launch classic TCP-based  attacks
such  as  SYN-floods,  but  can  also  be employed to launch other more
complex attacks such as TCP connection floods, etc.