|
| 1 | +## Description |
| 2 | + |
| 3 | +This module is not intended to exploit a vulnerability, but rather to perform host discovery on IPv6-enabled local networks. It sends ICMPv6 Echo Requests to several well-known multicast addresses (e.g., FF02::1) and listens for any ICMPv6-based response. |
| 4 | + |
| 5 | +This technique helps identify active IPv6 hosts and services, particularly when traditional IPv4 reconnaissance is limited or disabled. All responses — including Echo Replies, Neighbor Solicitations, and others — are valid evidence of a live host. |
| 6 | + |
| 7 | +## Verification Steps |
| 8 | + |
| 9 | +1. Do: `use auxiliary/scanner/discovery/ipv6_neighbor` |
| 10 | +2. Do: `set RHOSTS [IP]` |
| 11 | +3. Do: `set SHOST [IP]` |
| 12 | +4. Do: `run` |
| 13 | + |
| 14 | +## Scenarios |
| 15 | +``` |
| 16 | +msf6 auxiliary(scanner/discovery/ipv6_multicast_ping) > set SHOST 10.0.2.4 |
| 17 | +SHOST => 10.0.2.4 |
| 18 | +msf6 auxiliary(scanner/discovery/ipv6_multicast_ping) > set RHOST 10.0.2.2-10RHOST => 10.0.2.2-10 |
| 19 | +msf6 auxiliary(scanner/discovery/ipv6_multicast_ping) > run |
| 20 | +[*] Running module against 10.0.2.2 |
| 21 | +[*] Sending multicast pings... |
| 22 | +[*] Listening for responses... |
| 23 | +[*] Running module against 10.0.2.3 |
| 24 | +[*] Sending multicast pings... |
| 25 | +[*] Listening for responses... |
| 26 | +[*] Running module against 10.0.2.4 |
| 27 | +[*] Sending multicast pings... |
| 28 | +[*] Listening for responses... |
| 29 | +[*] Running module against 10.0.2.5 |
| 30 | +[*] Sending multicast pings... |
| 31 | +[*] Listening for responses... |
| 32 | +[*] Running module against 10.0.2.6 |
| 33 | +[*] Sending multicast pings... |
| 34 | +[*] Listening for responses... |
| 35 | +[*] Running module against 10.0.2.7 |
| 36 | +[*] Sending multicast pings... |
| 37 | +[*] Listening for responses... |
| 38 | +[*] Running module against 10.0.2.8 |
| 39 | +[*] Sending multicast pings... |
| 40 | +[*] Listening for responses... |
| 41 | +[*] Running module against 10.0.2.9 |
| 42 | +[*] Sending multicast pings... |
| 43 | +[*] Listening for responses... |
| 44 | +[*] Running module against 10.0.2.10 |
| 45 | +[*] Sending multicast pings... |
| 46 | +[*] Listening for responses... |
| 47 | +[*] Auxiliary module execution completed |
| 48 | +``` |
0 commit comments