Ibex: Pwning IPv6 Networks

Interactive IPv6 toolkit for pentesting IPv6 networks.

Ibex: Pwning IPv6 Networks

Ibex - is an interactive IPv6 toolkit for attacking IPv6 networks. It performs attacks using RA Spoofing and RDNSS Spoofing, and also features automatic NAT64/DNS64 configuration and is equipped with auto-tuning and intelligent CLI navigation.

Features:

  • RA Spoofing with custom lifetimes and intervals;
  • RDNSS Spoofing (RFC 8106) for DNS injection without DHCPv6;
  • Automatic NAT64 & DNS64 deployment using Tayga and BIND9;
  • RA Guard evasion via Hop-by-Hop (HBH) fragmentation;
  • Traffic sniffing to gather network information (DHCPv6 and NDP);
  • Automatic tuning of kernel network settings and routing;
  • Killswitch mode for emergency network recovery;
  • Support for multiple attack modes: mitmrouteronlydnsinject;
  • Interactive shell for each module with autocompletion;
  • DNS64 Relay for redirecting traffic to any server.

The tool is available here