1fuzz_ip6(8) IPv6 fuzz_ip6(8)
2
6 fuzz_ip6
7
10 fuzz_ip6 [-x] [-t number | -T number] [-p number] [-IFSDHRJ]
11 [-X|-1|-2|-3|-4|-5|-6|-7|-8|-9|-0 port|-P type] interface unicast-or-
12 multicast-address [address-in-data-pkt]
13 Fuzzes an IPv6 packet with optional EHs and upper layer transport
15
17 -X do not add any ICMP/TCP header (transport layer)
18 -1 fuzz ICMP6 echo request (default)
19 -2 fuzz ICMP6 neighbor solicitation
20 -3 fuzz ICMP6 neighbor advertisement
21 -4 fuzz ICMP6 router advertisement
22 -5 fuzz multicast listener report packet
23 -6 fuzz multicast listener done packet
24 -7 fuzz multicast listener query packet
25 -8 fuzz multicast listener v2 report packet
26 -9 fuzz multicast listener v2 query packet
27 -0 fuzz node query packet
28 -s port fuzz TCP-SYN packet against port
29 -P type fuzz PIMv2 type packet (hello, bootstrap, assert)
30 -x tries all 256 values for flag and byte types
31 -t number continue from test no. number
32 -T number only performs test no. number
33 -p number perform an alive check every number of tests (default: none)
34 -a do not perform initial and final alive test
35 -n number how many times to send each packet (default: 1)
36 -I fuzz the IP header too
37 -F add one-shot fragmentation, and fuzz it too (for 1)
38 -S add source-routing, and fuzz it too (for 1)
39 -D add destination header, and fuzz it too (for 1)
40 -H add hop-by-hop header, and fuzz it too (for 1 and 5-9)
41 -R add router alert header, and fuzz it too (for 5-9 and all)
42 -J add jumbo packet header, and fuzz it too (for 1)
43 You can only define one of -0 ... -9, -P and -s, defaults to -1.
44 Note that the -P fuzzing target should be ff02::d
45 Returns -1 on error, 0 on tests done and targt alive or 1 on target crash.
46
48 thc-ipv6 was written by van Hauser <vh@thc.org> / THC
49 The homepage for this toolkit is: http://www.thc.org/thc-ipv6
51
54 fuzz_ip6 v3.4 (c) 2018 by van Hauser / THC <vh@thc.org> www.thc.org
55THC 2020-01-31 fuzz_ip6(8)