Calin's Humble Scanner - User Guide

## Scan method IPv6 Ping Broadcast

This method will find all IPv6 enabled hosts that listen to a well-known multicast address.
Compared with an IPv4 ping-sweep this method is more effective because it sends a SINGLE packet. By exploiting a security vulnerability that I have found in the design of the ICMPv6 protocol (see RFC 2463), `CHScanner` will build and send a single packet and all IPv6 enabled hosts that listen on the specified multicast address will reply.
I have successfully tested this behaviour against the following operating systems:

- Windows XP Professional SP2
- Windows Server 2003
- Linux kernel 2.6.15(?) in Fedora Core 5
- Linux kernel 2.4.26 in Adamantix
- OpenSolaris nv35

To specify a multicast address set it as :

- if empty, All Nodes link-local
- NN for All Nodes node-local
- NL for All Nodes link-local
- RN for All Routers node-local
- RL for All Routers link-local
- RS for All Routers site-local
- user supplied IPv6 address

For this method the Operating System Mimic technology is NOT implemented yet.
The payload of the packets is in Windows XP style.

[ User Guide | Scan Methods ]

Copyright © 2006 - 2009 Calin Radoni Hosted on http://www.geocities.com/calinradoni Last page modification is 27 May 2006