- IPv6 (Wikipedia)
- ICMPv6 (Wikipedia)
- Teredo Tunneling
- IPv6 Security - Ray Hunt's presentation on IPv6 security
- Modified_EUI-64 Addressing (Wikipedia)
- Security Features in IPv6 - SANS
- Derek Morr's list on IPv6 Security
- ERNW's IPv6 Hardening Guide for Linux Servers (PDF)
Standards
IANA/Vendors
IETF Documents
- RFC6105 - IPv6 Router Advertisement Guard
- RFC4944.txt - Transmission of IPv6 Packets over IEEE 802.15.4 Networks
- http://tools.ietf.org/html/rfc5095 - Deprecation of Type 0 Routing Headers in IPv6
IEEE
Security Papers/Talks/Blogs
Blackhat 2012 EUROPE
- Attacking IPv6 Implementation Using Fragmentation (Antonios Atlasis)
Scapy Scripts Slides Video White Paper
Troupers 2013
- “Your IPv6 default config meets FOCA (…and starts to cry)” (Chema Alonso) Slides (PDF) Video
- IPv6 Extension Headers: New Features, and New Attack Vectors (Antonios Atlasis) Slides
- Fragmentation Overlapping Attacks Against IPv6: One Year Later (Antonios Atlasis) Slides
- Design & Configuration of IPv6 Segments with High Security Requirements (Enno Rey) Slides
- Securing IPv6 in the Cisco Space (Christopher Werny) Slides
Troupers 2014
This conference occurred on March 17-18, 2014. Some of the talks:
- Researching IPv6 Security Capabilities (RISC) - Antonios Atlasis
- HA Strategies in IPv6 Networks Ivan Pepelnjak (PDF)
- Secure Operation of an IPv6 Network - Eric Vyncke (PDF)
- Why IPv6 Security is so hard – Structural Deficits of IPv6 and their Implications Enno Rey
- Remote OS Detection with IPv6 - Mathias Morbitzer (PDF)
- Recent IPv6 Security Standardization Efforts - Fernando Gont (PDF)
- The IPv6 Snort Plugin Martin Schütte
- Case Study: Building a Secure IPv6 Guest WiFi Network - Christopher Werny (PDF)
Reference here
Blog posts
- Collection of blog posts on IPv6 Security - from Enno Rey/Insinuator/TROOPERS. The source!!
- IPv6 Focus Month: The warm and fuzzy side of IPv6
- IPv6 Focus Month: Kaspersky Firewall IPv6 Vulnerability
Other talks/presentations
- Wireless Networking with IEEE 802.15.4 and 6LoWPAN - Alan Ott, Embedded Linux Conference – Europe November 5, 2012
- Considerations for IEEE 802.15.4 Networks Naveen Sastry and David Wagner, ACM Workshop on Wireless Security WiSe 2004, October 2004
Firewall
Sample rules for IPv6 Ipwalls/ip6tables
- ip6tables: IPv6 Firewall For Linux - Nix Craft
- http://www.sixxs.net/wiki/IPv6_Firewalling - SixXS rules
- http://www.cert.org/downloads/IPv6/ip6tables_rules.txt US-CERT example rules
- Igor Drobot's rules - ZeldoR.biz
Tools
- Chiron- Linux distro for IPv6 pentesting -
- THC-IPv6
- SI6 Networks' IPv6 Toolkit
- IP6MON
- ipaddr (Python) - IP Address Manipulation
- NDPMon - ARPWatch for IPv6
- ft6 - by Oliver Reggert
References
- IPv6 Go6 Mini-How-to
- IPv6 Type 0 – Routing Header - IETF White Paper
- IPv6 Router Header Security - Philippe BIONDI and Arnaud EBALARD
- IPV6 HowTo from Linuxtopia, or IPV6 HowTo from TLDP.org
- ip6tables - Red Hat Enterprise Linux 4: Security Guide
- IPv6 Security from Cisco Press
