Discovery/ipv6 neighbor
De www.metasploit-es.com.ar
El modulo auxiliar "ipv6_neighbor" prueba la red local en busca de hosts IPv6 que respodan a Solicitudes de Vecindad con un enlace-direccion local. Este modulo, como el arp_sweep, funcionara unicamente dentro del dominio de difusion de la maquina atacante.
msf > use auxiliary/scanner/discovery/ipv6_neighbor msf auxiliary(ipv6_neighbor) > show options Module options: Name Current Setting Required Description ---- --------------- -------- ----------- INTERFACE no The name of the interface PCAPFILE no The name of the PCAP capture file to process RHOSTS yes The target address range or CIDR identifier SHOST yes Source IP Address SMAC yes Source MAC Address THREADS 1 yes The number of concurrent threads TIMEOUT 500 yes The number of seconds to wait for new data
Ademas de definir el valor RHOSTS, necesitamos tambien definir nuestra direccion MAC origen (SMAC) y la direccion IP del host origen (SHOST). Seguidamente definimos los valores RHOSTS y THREADS y lo ejecutamos.
msf auxiliary(ipv6_neighbor) > set RHOSTS 192.168.1.2-254 RHOSTS => 192.168.1.200-254 msf auxiliary(ipv6_neighbor) > set SHOST 192.168.1.101 SHOST => 192.168.1.101 msf auxiliary(ipv6_neighbor) > set SMAC d6:46:a7:38:15:65 SMAC => d6:46:a7:38:15:65 msf auxiliary(ipv6_neighbor) > set THREADS 55 THREADS => 55 msf auxiliary(ipv6_neighbor) > run [*] IPv4 Hosts Discovery [*] 192.168.1.10 is alive. [*] 192.168.1.11 is alive. [*] 192.168.1.2 is alive. [*] 192.168.1.69 is alive. [*] 192.168.1.109 is alive. [*] 192.168.1.150 is alive. [*] 192.168.1.61 is alive. [*] 192.168.1.201 is alive. [*] 192.168.1.203 is alive. [*] 192.168.1.205 is alive. [*] 192.168.1.206 is alive. [*] 192.168.1.99 is alive. [*] 192.168.1.97 is alive. [*] 192.168.1.250 is alive. [*] IPv6 Neighbor Discovery [*] 192.168.1.69 maps to IPv6 link local address fe80::5a55:caff:fe14:1e61 [*] 192.168.1.99 maps to IPv6 link local address fe80::5ab0:35ff:fe6a:4ecc [*] 192.168.1.97 maps to IPv6 link local address fe80::7ec5:37ff:fef9:a96a [*] Scanned 253 of 253 hosts (100% complete) [*] Auxiliary module execution completed msf auxiliary(ipv6_neighbor) >
Mirando a la salida del modulo, puedes ver que este escaneador sirve al proposito doble de mostrar que hosts estan en linea de forma similar a arp_sweep, y entonces realizar el IPv6 Neighbor Discovery.
© Offensive Security 2009
Original de www.offensive-security.com Traducido por cbk999
