Network Toolkit for exploiting Internet Protocol version 6 Security Vulnerabilities

Network Toolkit for exploiting Internet Protocol version 6 Security Vulnerabilities

Paper in proceedings (conference paper)

This work has developed a network toolkit in Python to automatically carry out several network attacks and security vulnerability testing when operating IPv6. Specifically, the program can be used to launch specified practical types of attacks according to the user’s direction such as DoS (Denial of Service), dumping servers, spoofing or bypassing the firewall. The essence of these attacks is based on the inherent vulnerabilities of Extension headers, and protocols such as ICMPv6 (Internet Control Message Protocol), DHCPv6 (Dynamic Host Configuration) Protocol, which are the most important protocols in the IPv6 network operation. In addition, the analysis and illustrations have been presented, which can help network analysts to have a clearer understanding of the potential dangers that could arise from implementation of IPv6. From there, they can propose appropriate solutions to eliminate or mitigate damage when attacks occur.

This work has developed a network toolkit in Python to automatically carry out several network attacks and security vulnerability testing when operating IPv6. Specifically, the program can be used to launch specified practical types of attacks according to the user’s direction such as DoS (Denial of Service), dumping servers, spoofing or bypassing the firewall. The essence of these attacks is based on the inherent vulnerabilities of Extension headers, and protocols such as ICMPv6 (Internet Control Message Protocol), DHCPv6 (Dynamic Host Configuration) Protocol, which are the most important protocols in the IPv6 network operation. In addition, the analysis and illustrations have been presented, which can help network analysts to have a clearer understanding of the potential dangers that could arise from implementation of IPv6. From there, they can propose appropriate solutions to eliminate or mitigate damage when attacks occur.

IPv6; ICMPv6; Toolkit; Network security; Attack; Python; Kali Linux; Scapy

IPv6; ICMPv6; Toolkit; Network security; Attack; Python; Kali Linux; Scapy

PHAN, V.; JEŘÁBEK, J.

2024

25.04.2023

Brno University of Technology, Faculty of Electrical Engineering and Communication

Brno

978-80-214-6154-3

Proceedings II of the 29th Student EEICT 2023 Selected papers

1

125

128

4

https://www.eeict.cz/eeict_download/archiv/sborniky/EEICT_2023_sbornik_2_v2.pdf