Practical Guide to IPv6 Attacks in a Local Network

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://habr.com/ru/articles/930526/
• Blog Title: Practical Guide to IPv6 Attacks in a Local Network
• Suggested Section: generic-methodologies-and-resources/pentesting-network/pentesting-ipv6.md

🎯 Content Summary

IPv6 NDP & DHCPv6 Attack & Defense Summary

IPv6 Fundamentals

Every host with IPv6 enabled auto-configures a link-local address in the fe80::/10 range, used exclusively for:

• Neighbor Discovery Protocol (NDP)
• Stateless Address Autoconfiguration (SLAAC)
• Router Advertisement/Solicitation (RA/RS)
• DHCPv6

All ICMPv6 ND messages use link-loc...

🔧 Technical Details

Passive NDP Sniffing: Use a Python Scapy sniffer to passively capture ICMPv6 ND (RS, RA, NS, NA, Redirect), MLD, and DHCPv6 packets on a local interface. The script identifies message types, extracts MAC and IPv6 src/dst addresses, and timestamps each event, enabling stealth network discovery without active scans.

RA Spoofing: Craft and send ICMPv6 Router Advertisement packets with custom routerlifetime, Source Link-Layer Address, and Defau...

🤖 Agent Actions

Updated existing page: src/generic-methodologies-and-resources/pentesting-network/pentesting-ipv6.md

Key additions:

1. Added detailed section “Router Advertisement Flags (M/O) & Default Router Preference (Prf)”
   • Explains impact of M and O flags on client behaviour and attack surface
   • Provides tcpdump one-liner to quickly inspect RA flags during pentests
   • Describes Prf values (High/Medium/Low) and how to set them with Scapy

2. Enhanced References
   • Added original blog post “[Practical Guide to IPv6 Attacks in a Local Network]” URL
   • Restored/kept SANS IPv6 attack-defence reference

No new files were needed; existing IPv6 pentesting page already covered the rest of the blog’s material (passive NDP sniffing, RA/RDNSS spoofing, DHCPv6 mitm6, system tuning, mitigations...

✅ Review Checklist

• Content is technically accurate
• Formatting follows HackTricks style guidelines
• Links and references are working
• Content adds educational value
• No sensitive information is exposed

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

[carlospolop]

🔗 Additional Context

Original Blog Post: https://habr.com/ru/articles/930526/

Content Categories: Based on the analysis, this content was categorized under "generic-methodologies-and-resources/pentesting-network/pentesting-ipv6.md".

Repository Maintenance:

• MD Files Formatting: 864 files processed

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0