JUMBO6(1)

💖 JUMBO6(1) 💖

okay bestie, gather round, because this one is a whole vibe — it's jumbo6, a security assessment tool living in the General Commands Manual, and she is here to test attack vectors built on IPv6 jumbograms. yes. jumbograms. huge packets. main character energy fr fr 🦋

✨ NAME ✨

jumbo6 — a security assessment tool for attack vectors based on IPv6 jumbograms 💅

🌈 SYNOPSIS 🌈

jumbo6 [-i INTERFACE] [-S LINK_SRC_ADDR] [-D LINK-DST-ADDR] [-s
SRC_ADDR[/LEN]] [-d DST_ADDR] [-A HOP_LIMIT] [-H HBH_OPT_HDR_SIZE]  [-U
DST_OPT_U_HDR_SIZE] [-y FRAG_SIZE] [-u DST_OPT_HDR_SIZE] [-q
IPV6_LENGTH] [-Q JUMBO_LENGTH] [-P PAYLOAD_SIZE] [-l] [-z SECONDS] [-v]
[-h]

like, that's the whole run of flags, no notes, go off 👑

🎀 DESCRIPTION 🎀

so jumbo6 lets you assess IPv6 implementations against attack vectors that ride on IPv6 jumbograms. it's part of the SI6 Networks' IPv6 Toolkit — a security assessment suite for the IPv6 protocols. iconic behavior honestly 💜

this tool has exactly one mode of operation, and it's the active one:

• active mode — the tool sends IPv6 jumbograms to the target you specify, and then tells you about any ICMPv6 error messages it gets back (typically "ICMPv6 Parameter Problem" error messages).

💅 OPTIONS 💅

jumbo6 takes its parameters as command-line options. each option can be written two ways, bestie:

• a short name — one character, preceded by the hyphen character, like -i 🌸
• a long name — a string preceded by two hyphen characters, like --interface ✨

also, lowkey important: jumbo6 supports IPv6 Extension Headers, including the IPv6 Fragmentation Header, which might be of use to circumvent layer-2 filtering and/or Network Intrusion Detection Systems (NIDS). but no cap — IPv6 extension headers are not employed by default, you have to explicitly enable them with the corresponding options. don't forget or you'll be sitting there confused, and I refuse 😭

• -i INTERFACE, --interface INTERFACE — this one picks the network interface the tool will use. if your destination address (the -d option) is a link-local address, you must specify the interface explicitly. you can also give the interface alongside a destination address with the -d option. 🫶
• -S SRC_LINK_ADDR, --src-link-address SRC_LINK_ADDR — sets the link-layer Source Address of the probe packets. if you leave it unspecified, the link-layer Source Address of the packets is set to the real link-layer address of the network interface. (so, default = your actual self, no catfishing 💀)
• -D DST_LINK_ADDR, --dst-link-address DST_LINK_ADDR — sets the link-layer Destination Address of the probe packets (currently, only Ethernet is supported). by default, the link-layer Destination Address is automatically set to the link-layer address of the destination host (for on-link destinations) or to the link-layer address of the first-hop router. she figures it out herself, queen 👑
• -s SRC_ADDR, --src-address SRC_ADDR — sets the IPv6 source address (or IPv6 prefix) used for the Source Address of the outgoing packets. if you give an IPv6 prefix, the IPv6 Source Address of the outgoing packets will be randomized from that prefix. surprise, she's versatile 🌸
• -d DST_ADDR, --dst-address DST_ADDR — sets the IPv6 Destination Address of the target node. this option cannot be left unspecified. periodt, it's required 💅
• --hop-limit, -A — sets the Hop Limit used for the IPv6 packets. by default, the Hop Limit is randomized. chaos, but make it standards-compliant 🔥
• -y SIZE, --frag-hdr SIZE — says the resulting packet must be fragmented. you pass the fragment size as the argument to this option.
• -u HDR_SIZE, --dst-opt-hdr HDR_SIZE — says a Destination Options header should be included in the resulting packet. the extension header size goes in as the argument (the header is filled with padding options). you can stack multiple Destination Options headers by using multiple -u options. more is more, bestie ✨
• -U HDR_SIZE, --dst-opt-u-hdr HDR_SIZE — says a Destination Options header should go in the "unfragmentable part" of the resulting packet. the header size goes in as the argument (again, filled with padding options). multiple Destination Options headers via multiple -U options. ⚠️ this option is only valid if the -y option is specified — because the concept of "unfragmentable part" only makes sense when fragmentation is employed. no -y, no -U, that's the rule 🙈
• -H HDR_SIZE, --hbh-opt-hdr HDR_SIZE — says a Hop-by-Hop Options header should be included in the resulting packet. header size as the argument (padding options fill it). multiple Hop-by-Hop Options headers via multiple -H options. stack 'em 🎀
• --ipv6-length, -q — sets the value that the "Total Length" field of the IPv6 header should be set to. if you leave this unspecified, the "Total Length" field is set to 0, as required by the IPv6 jumbograms specification. it's giving "trust the process" 💜
• --jumbo-length, -Q — sets the value for the "Jumbo Payload Length" field of the Jumbo Payload option. if unspecified, the "Jumbo Payload Length" field is set according to the real size of the jumbo payload (see the -p option). 🦋
• --payload-size, -P — specifies the size of the jumbo payload. if left unspecified, the payload size is set to 0. tiny, but she's valid ✨
• --loop, -l — tells jumbo6 to send periodic IPv6 jumbograms to the victim node. the amount of time to pause between sending IPv6 jumbograms can be set with the -z option, and defaults to 1 second. round and round we go 🔥
• --sleep, -z — sets the amount of time to pause between sending IPv6 jumbograms (when the --loop option is set). if unspecified, it defaults to 1 second. nap time between the chaos 😴
• --verbose, -v — tells jumbo6 to be verbose. set it twice and the tool becomes "very verbose", and it also informs you which packets have been accepted or discarded as a result of applying the specified filters. she will not stop talking and honestly? respect 💅
• --help, -h — print help information for the jumbo6 tool. the classic, the icon, the goat 🫶

🌟 EXAMPLES 🌟

the following sections illustrate typical use cases of the jumbo6 tool. (yes, "sections". we keep it exactly as she said it.)

Example #1

# jumbo6 -s fc00:1::/64 -d fc00:1::1 -P 100

send an IPv6 jumbogram to the host fc00:1::1. the IPv6 Source Address will be randomly selected from the prefix fc00:1::/64, and a the payload of 100 bytes is included in the packet. 🦋✨ (yes, "a the". she said what she said. we do not edit the queen.)

👑 AUTHOR 👑

the jumbo6 tool and the corresponding manual pages were produced by Fernando Gont <fgont@si6networks.com> for SI6 Networks <http://www.si6networks.com>. absolute legend behavior, we love to see it 💖

📜 COPYRIGHT 📜

Copyright (c) 2011-2013 Fernando Gont.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. a copy of the license is available at <http://www.gnu.org/licenses/fdl.html>. 🫶

okay and that's the whole page bestie — this one came out of the General Commands Manual, and the footer said JUMBO6(1), so consider this your official sign-off: same title, same manual, we just made it cute 💅🎀💜