Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -2 down vote favorite

When I try to use nmap:

# nmap -sP -6 FE80::1-234
[...] Failed to resolve given IPv6 hostname/IP: FE80::1-234. Note that you can't use '/mask' or '[1-4,7,100-]' style ranges for IPv6.[...]

What other tool can I use?

share|improve this question
2  
This practical question about using a tool would be more suited to Unix & Linux than here. But don't repost the question as is. There's a reason why nmap doesn't support IPv6 ranges: they're rarely useful. What are you trying to achieve? – Gilles Mar 17 '12 at 19:21
I want to scan some scope of IPv6 Addresses using existing tool - it is necessary to my research paper. – seymourbirkoff Mar 18 '12 at 13:41
@seymourbirkoff - Does this existing tool support IPv6 Addresses? – Ramhound Mar 19 '12 at 13:49
Does it work when you ping-scan a single address? – Marcin Mar 19 '12 at 19:18

closed as off topic by Gilles, AviD♦ Apr 19 '12 at 18:11

Questions on IT Security Stack Exchange are expected to relate to IT security within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

3 Answers

up vote 3 down vote

There was an interesting presentation from Metasploit on this recently (blog post is here)

From that there are a number of techniques that nmap can use to identify IPv6 hosts on the local network which could be of use to you

Scanning your local subnet for all IPv6-enabled systems in one shot:

nmap -6 --script=targets-ipv6-multicast-*

Port scanning the top 10000 ports on these assets:

nmap -6 --script=targets-ipv6-multicast-* --script-args=newtargets -PS --top-ports=10000

share|improve this answer
1  
+1 nice catch on the new nmap scripts! The limitation here is that you have to be 'link-local': nmap.org/nsedoc/scripts/targets-ipv6-multicast-echo.html – schroeder Apr 10 '12 at 22:21
up vote 2 down vote

Using nmap

Write a short script to generate the IPv6 range you want to scan, then pass that to nmap using -iL

nmap -Pn -sS -p 80 -6 -iL ipv6.txt

IPv6 Target File

For the script (if you need help with this part) do a for loop:

for i in {1..234}; do echo "FE80::$i" >> ipv6.txt; done

The only limit I see with this setup, is that you will have to calculate the appropriate ip range, which might not be simple, depending on the network design.

share|improve this answer
Do not forget that IPv6 uses hex numbers: for i in {1..234}; do printf "2001:5c0:1400:a::%x\n" $i >> ipv6.txt; done – Vanuan Mar 1 at 19:23
up vote 1 down vote

You can use THC-IPv6 as well.

share|improve this answer
does thc-ipv6 scan ranges? – schroeder Apr 10 '12 at 22:16

Not the answer you're looking for? Browse other questions tagged or ask your own question.