[ipv6hackers] Penetration Testing Tools that (do not) Support IPv6

Discussion:

Enno Rey

2014-12-11 23:36:56 UTC

Hi,

we just released a white paper authored by Antonios Atlasis that provides an overview which pentesting tools currently support IPv6 and how to (still) use them if that's not the case. It can be found at https://www.ernw.de/download/newsletter/ERNW_Newsletter_45_PenTesting_Tools_that_Support_IPv6_v.1.1_en.pdf.
Hope some of you might find it helpful...

best

Enno
--
Enno Rey

ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902

Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey

=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
Twitter: @Enno_Insinuator
=======================================================

Joe Klein

2014-12-12 00:51:27 UTC

Permalink

Nice job! Had done that twice before, but only published to the tool
makers.

Joe Klein
"Inveniam viam aut faciam"

Post by Enno Rey
Hi,
we just released a white paper authored by Antonios Atlasis that provides
an overview which pentesting tools currently support IPv6 and how to
(still) use them if that's not the case. It can be found at
https://www.ernw.de/download/newsletter/ERNW_Newsletter_45_PenTesting_Tools_that_Support_IPv6_v.1.1_en.pdf
.
Hope some of you might find it helpful...
best
Enno
--
Enno Rey
ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902
Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey
=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
=======================================================
_______________________________________________
Ipv6hackers mailing list
http://lists.si6networks.com/listinfo/ipv6hackers

Marc Heuse

2014-12-12 08:45:03 UTC

Permalink

Hi,

for hydra -M

this is actually fixed in v8.2 that came out on Monday :-)
But: you have to put IPv6 addresses in the input file in [] brackets,
because it is possible to supply a different port for each entry.
so
$ cat targets.txt
[fe80::1%eth0]
[2001::1]
[2002::2]:8080
etc.
But I have to mention that somewhere :)

and for the amap entry: amap is outdated and no longer supported by me.
nmap -sVC is way better. I know I was first with the technique, but as
therefore the implementation was simplistic, nmap did a way more
flexible and better implementation.

Greets,
Marc

--
--
Marc Heuse
Mobil: +49 177 9611560
Fax: +49 30 37309726
www.mh-sec.de

Marc Heuse - IT-Security Consulting
Winsstr. 68
10405 Berlin

Ust.-Ident.-Nr.: DE244222388
PGP: AF3D 1D4C D810 F0BB 977D 3807 C7EE D0A0 6BE9 F573

Antonios Atlasis

2014-12-12 12:39:27 UTC

Permalink

Hi Marc,

Post by Marc Heuse
Hi,
for hydra -M
this is actually fixed in v8.2 that came out on Monday :-)
But: you have to put IPv6 addresses in the input file in [] brackets,
because it is possible to supply a different port for each entry.
so
$ cat targets.txt
[fe80::1%eth0]
[2001::1]
[2002::2]:8080
etc.
But I have to mention that somewhere :)

That's great, thanks!

Post by Marc Heuse
and for the amap entry: amap is outdated and no longer supported by me.
nmap -sVC is way better. I know I was first with the technique, but as
therefore the implementation was simplistic, nmap did a way more
flexible and better implementation.

I have read this info at amap site, but still, for reasons of completeness
I wanted to test it [or, because I am an old guy and I grew up with amap :)
] .

Best

Antonios

Post by Marc Heuse
Greets,
Marc

Post by Enno Rey
Hi,
we just released a white paper authored by Antonios Atlasis that

provides an overview which pentesting tools currently support IPv6 and how
to (still) use them if that's not the case. It can be found at
https://www.ernw.de/download/newsletter/ERNW_Newsletter_45_PenTesting_Tools_that_Support_IPv6_v.1.1_en.pdf
.

Post by Enno Rey
Hope some of you might find it helpful...
best
Enno

--
--
Marc Heuse
Mobil: +49 177 9611560
Fax: +49 30 37309726
www.mh-sec.de
Marc Heuse - IT-Security Consulting
Winsstr. 68
10405 Berlin
Ust.-Ident.-Nr.: DE244222388
PGP: AF3D 1D4C D810 F0BB 977D 3807 C7EE D0A0 6BE9 F573

Loganaden Velvindron

2014-12-12 10:59:21 UTC

Permalink

Hi Enno,

The website seems to have issues.

Post by Enno Rey
best
Enno
--
Enno Rey
ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902
Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey
=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
=======================================================
_______________________________________________
Ipv6hackers mailing list
http://lists.si6networks.com/listinfo/ipv6hackers

--
This message is strictly personal and the opinions expressed do not
represent those of my employers, either past or present.

Ville Tiensuu

2014-12-12 12:24:33 UTC

Permalink

Hi,

It works for me.

-Ville

Post by Loganaden Velvindron

Hi Enno,
The website seems to have issues.

--
Ville Tiensuu

0432110516
***@tiensuu.eu

=?ks_c_5601-1987?B?sei5q7y6?=

2014-12-22 01:04:59 UTC

Permalink

In my case, link is down.

Please fix it.

I wish to download this cool doc.

-----Original Message-----
From: Ipv6hackers [mailto:ipv6hackers-***@lists.si6networks.com] On Behalf Of Ville Tiensuu
Sent: Friday, December 12, 2014 9:25 PM
To: IPv6 Hackers Mailing List
Subject: Re: [ipv6hackers] Penetration Testing Tools that (do not) Support IPv6

Hi,

It works for me.

-Ville

Post by Loganaden Velvindron

Hi Enno,
The website seems to have issues.

Post by Enno Rey
best
Enno
--
Enno Rey
ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de Tel.
+49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902
Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Enno Rey
=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
=======================================================
_______________________________________________
Ipv6hackers mailing list
http://lists.si6networks.com/listinfo/ipv6hackers

--
Ville Tiensuu

0432110516
***@tiensuu.eu