1fuzz_ip6(8)                          IPv6                          fuzz_ip6(8)
2
3
4

NAME

6       fuzz_ip6
7
8

SYNOPSIS

10       fuzz_ip6   [-x]   [-t  number  |  -T  number]  [-p  number]  [-IFSDHRJ]
11       [-X|-1|-2|-3|-4|-5|-6|-7|-8|-9|-0 port|-P type]  interface  unicast-or-
12       multicast-address [address-in-data-pkt]
13
14       Fuzzes an IPv6 packet with optional EHs and upper layer transport
15

OPTIONS

17        -X         do not add any ICMP/TCP header (transport layer)
18        -1         fuzz ICMP6 echo request (default)
19        -2         fuzz ICMP6 neighbor solicitation
20        -3         fuzz ICMP6 neighbor advertisement
21        -4         fuzz ICMP6 router advertisement
22        -5         fuzz multicast listener report packet
23        -6         fuzz multicast listener done packet
24        -7         fuzz multicast listener query packet
25        -8         fuzz multicast listener v2 report packet
26        -9         fuzz multicast listener v2 query packet
27        -0         fuzz node query packet
28        -s port    fuzz TCP-SYN packet against port
29        -P type    fuzz PIMv2 type packet (hello, bootstrap, assert)
30        -x         tries all 256 values for flag and byte types
31        -t number  continue from test no. number
32        -T number  only performs test no. number
33        -p number  perform an alive check every number of tests (default: none)
34        -a         do not perform initial and final alive test
35        -n number  how many times to send each packet (default: 1)
36        -I         fuzz the IP header too
37        -F         add one-shot fragmentation, and fuzz it too (for 1)
38        -S         add source-routing, and fuzz it too (for 1)
39        -D         add destination header, and fuzz it too (for 1)
40        -H         add hop-by-hop header, and fuzz it too (for 1 and 5-9)
41        -R         add router alert header, and fuzz it too (for 5-9 and all)
42        -J         add jumbo packet header, and fuzz it too (for 1)
43       You can only define one of -0 ... -9, -P and -s, defaults to -1.
44       Note that the -P fuzzing target should be ff02::d
45       Returns -1 on error, 0 on tests done and targt alive or 1 on target crash.
46

AUTHOR

48       thc-ipv6 was written by van Hauser <vh@thc.org> / THC
49
50       The homepage for this toolkit is: http://www.thc.org/thc-ipv6
51
52
54       fuzz_ip6 v3.4 (c) 2018 by van Hauser / THC <vh@thc.org> www.thc.org
55
56
57
58THC                               2021-01-29                       fuzz_ip6(8)
Impressum