domains / families / security / exploiting-ipv6-vulnerabilities

exploiting-ipv6-vulnerabilities

separate

'Identifies and exploits IPv6-specific vulnerabilities including SLAAC

When to use

• Testing whether dual-stack networks have consistent security controls for both IPv4 and IPv6 traffic
• Demonstrating risks from unmanaged IPv6 on networks where only IPv4 is officially supported
• Exploiting SLAAC and Router Advertisement mechanisms to perform man-in-the-middle attacks via IPv6
• Testing IPv6-aware firewall rules and IDS/IPS detection for IPv6-specific attack patterns
• Identifying IPv6 tunneling protocols (6to4, Teredo, ISATAP) that bypass IPv4-only security controls

When not to use

• Production networks without written authorization
• Systems where IPv6 disruption causes safety issues
• Denial-of-service attacks against network infrastructure

Skill page

Source