fuzz_ip6(8)

📦
version 3.8 · 7 versions
, in epel 9

✨ fuzz_ip6 ✨

okay bestie, gather round, because we're about to talk about fuzz_ip6 from the thc-ipv6 toolkit (that's the IPv6 section of the manual, iykyk) and honestly? it's giving chaotic hacker energy in the best way 💅

🎀 SYNOPSIS 🎀

fuzz_ip6 [-x] [-t number | -T number] [-p number] [-IFSDHRJ]
[-X|-1|-2|-3|-4|-5|-6|-7|-8|-9|-0 port|-P type] interface unicast-or-
multicast-address [address-in-data-pkt]

so what does it even do? it fuzzes an IPv6 packet with optional EHs and upper layer transport. literally just throwing weird packets at stuff to see what breaks, and we love that for us 🌈

💖 OPTIONS 💖

okay this is the part you actually need, so pay attention bestie:

  • -X — do not add any ICMP/TCP header (that's the transport layer, bestie)
  • -1 — fuzz ICMP6 echo request (this is the default btw ✨)
  • -2 — fuzz ICMP6 neighbor solicitation
  • -3 — fuzz ICMP6 neighbor advertisement
  • -4 — fuzz ICMP6 router advertisement
  • -5 — fuzz multicast listener report packet
  • -6 — fuzz multicast listener done packet
  • -7 — fuzz multicast listener query packet
  • -8 — fuzz multicast listener v2 report packet
  • -9 — fuzz multicast listener v2 query packet
  • -0 — fuzz node query packet
  • -s port — fuzz TCP-SYN packet against port
  • -P type — fuzz PIMv2 type packet (hello, bootstrap, assert)
  • -x — tries all 256 values for flag and byte types (yes, all of them, no cap 🔥)
  • -t number — continue from test no. number
  • -T number — only performs test no. number
  • -p number — perform an alive check every number of tests (default: none)
  • -a — do not perform initial and final alive test
  • -n number — how many times to send each packet (default: 1)
  • -I — fuzz the IP header too
  • -F — add one-shot fragmentation, and fuzz it too (for 1)
  • -S — add source-routing, and fuzz it too (for 1)
  • -D — add destination header, and fuzz it too (for 1)
  • -H — add hop-by-hop header, and fuzz it too (for 1 and 5-9)
  • -R — add router alert header, and fuzz it too (for 5-9 and all)
  • -J — add jumbo packet header, and fuzz it too (for 1)
🫶 quick vibe check: you can only define one of -0 ... -9, -P and -s, and it defaults to -1.
💀 also note that the -P fuzzing target should be ff02::d (don't ask, just trust the process)

and the exit codes? returns -1 on error, 0 on tests done and target alive, or 1 on target crash. literally the whole personality of this thing in one line 😭

🌸 AUTHOR 🌸

thc-ipv6 was written by van Hauser <vh@thc.org> / THC

the homepage for this toolkit is: https://github.com/vanhauser-thc/thc-ipv6 👑

fuzz_ip6 3.8 (c) 2020 by van Hauser / THC <vh@thc.org>

www.github.com/vanhauser-thc/thc-ipv6

and that's the whole thing, bestie 🎀 this page is from the THC fam, dated 2022-06-19, and it's the fuzz_ip6(8) man page — go fuzz responsibly, ily, periodt 💜

📦 where this page comes from