3 ms·
I realize there are a million ways to leak addresses, but in theory is a private ipv6 space brute forceable? ie: I have every service listen on a port on some I
by staticassertion 4y ago
I realize there are a million ways to leak addresses, but in theory is a private ipv6 space brute forceable? ie: I have every service listen on a port on some IP, they all discover each other through some specific channel (like dns). Assuming the attacker doesn't have access to that channel, they would have to start scanning every ip to try to discover services, yeah?
- syrrim 4y agoThere's neighbor discovery.
- doublepg23 4y agoThere are ways to optimize an attack but pure brute force like IPv4 is impossible.
- dc-programmer 4y agoOn a local link, if you know the ipv6 address of one machine you can guess others by getting their device ID (MAC address) and then modifying the known address. So you can use neighbor discovery to find the other MAC addresses to craft the IP addresses. I think you can also take advantage of router advertisement or client solicitations somehow but I’m not familiar with the details (i.e. passive listening on multicast vis a vis broadcast)
- staticassertion 4y agoThanks. I'll have to do some googling on that.