IPv6 SpecialTests - Revision history

Wikiadmin: /* Links to other material */

2022-07-09T17:14:46Z

Links to other material

Wikiadmin at 21:21, 4 January 2019

2019-01-04T21:21:13Z

Wikiadmin at 08:20, 11 July 2015

2015-07-11T08:20:34Z

Wikiadmin at 08:01, 25 April 2015

2015-04-25T08:01:00Z

Wikiadmin at 10:10, 18 April 2015

2015-04-18T10:10:33Z

Wikiadmin at 16:47, 27 June 2014

2014-06-27T16:47:54Z

Wikiadmin at 16:47, 27 June 2014

2014-06-27T16:47:09Z

Wikiadmin at 10:11, 16 February 2014

2014-02-16T10:11:52Z

Wikiadmin at 10:09, 16 February 2014

2014-02-16T10:09:27Z

Wikiadmin at 10:08, 16 February 2014

2014-02-16T10:08:17Z

@@ Line 12: / Line 12: @@
 * [[ScanStatus]] - a description of the reportable states for each tested TCP/IP or UDP/IP port
 * [[ScanAutomation]] - a quick overview of IPv6 TCP/UDP port scan automation using wget
-* [[IPv6_DEBUG]] - some steps for debugging IPv6 access to my IPv6 Port Scanner
+* [[IPv6_DEBUG]] - some steps for debugging IPv6 access to the IPscan IPv6 Port Scanner
 * [[IPv6_Windows7]] - some useful Win7 IPv6-related commands
 * [[Raspberry_Pi_IPv6_firewall_tester]] - a quick HowTo describing the steps to make your own RasPi-powered IPv6 firewall tester.
 ===NTP Monitor List Query '''UDP/123[1]'''===

← Older revision		Revision as of 21:21, 4 January 2019
Line 2:		Line 2:

	IPscan includes the following tests to identify known weak protocols or poorly configured services, which may be exploited.		IPscan includes the following tests to identify known weak protocols or poorly configured services, which may be exploited.
−

	It is important to note that the same exploits may well apply to IPv4 hosts running the same protocols.		It is important to note that the same exploits may well apply to IPv4 hosts running the same protocols.

@@ Line 44: / Line 44: @@
 </TABLE>
-This website publishes a Privacy Policy. Continued use of this website implies your consent to the storage of data outlined in the policy.
+This website publishes a Privacy Policy. Continued use of this website implies your consent to the use of data outlined in the policy.
 ----

← Older revision		Revision as of 08:01, 25 April 2015
Line 46:		Line 46:
	This website publishes a Privacy Policy. Continued use of this website implies your consent to the storage of data outlined in the policy.		This website publishes a Privacy Policy. Continued use of this website implies your consent to the storage of data outlined in the policy.
	----		----
−
−
−	~~<adsense>1</adsense>~~

@@ Line 44: / Line 44: @@
 </TABLE>
+This website publishes a Privacy Policy. Continued use of this website implies your consent to the storage of data outlined in the policy.
 ----
 <adsense>1</adsense>

@@ Line 38: / Line 38: @@
 <TABLE border="1" style="width:300px">
-<TR><TH>Port/Case</TH><TH>SNMP version</TH><TH>Test performed, credentials used</TH></TR>
+<TR><TH>Port/Special Case</TH><TH>SNMP version</TH><TH>Test performed, credentials used</TH></TR>
 <TR><TD>UDP/161</TD><TD>v1</TD><TD>GET with 'public' community string</TD></TR>
 <TR><TD>UDP/161[1]</TD><TD>v2c</TD><TD>GET with 'private' community string</TD></TR>

@@ Line 18: / Line 18: @@
-===NTP Monitor List Query '''UDP/161[1]'''===
+===NTP Monitor List Query '''UDP/123[1]'''===
 The NTP protocol daemon, in versions prior to 4.2.7, supported a feature which reported a list of up to 600 clients which had used the queried NTP server as their time reference.
@@ Line 33: / Line 33: @@
 See [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211 CVE-2013-5211] for further details.

@@ Line 6: / Line 6: @@
 It is important to note that the same exploits may well apply to IPv4 hosts running the same protocols.
+===Links to other material===
 * [[IPv6]] - an overview of IPscan (IPv6 Port Scanner)
@@ Line 24: / Line 23: @@
 If an attacker uses a spoofed source address then a victim can be flooded with considerable NTP traffic. The size of the response is typically considerably larger than the request and consequently the attacker is able to amplify the volume of traffic directed at the victim. Additionally, because the responses are legitimate data coming from valid servers, it is especially difficult to block these types of attacks. The solution is to disable “monlist” within the NTP server or to upgrade to the latest version of NTP (4.2.7) which disables the “monlist” functionality.
 To prevent your NTP daemon being used in DDoS attacks it is necessary to disable “monlist” functionality. On a public-facing NTP server that cannot be updated to version 4.2.7 or later, add the “noquery” directive to the “restrict default” line in the system’s ntpd.conf, as shown below:

@@ Line 9: / Line 9: @@
 Links to other areas of the wiki:
-* [[IPv6 IPscan Firewall tester]] - an overview of IPscan (IPv6 Port Scanner)
+* [[IPv6]] - an overview of IPscan (IPv6 Port Scanner)
-* [[IPv6_Firewalls IPv6 Firewalls]] - some observations on IPv6 firewalls and address selections
+* [[IPv6_Firewalls]] - some observations on IPv6 firewalls and address selections
-* [[IPv6_Ports IPscan default ports]] - a list of the default TCP/IP and UDP/IP ports which IPscan will test
+* [[IPv6_Ports]] - a list of the default TCP/IP and UDP/IP ports which IPscan will test
-* [[ScanStatus IPscan reporting]] - a description of the reportable states for each tested TCP/IP or UDP/IP port
+* [[ScanStatus]] - a description of the reportable states for each tested TCP/IP or UDP/IP port
-* [[ScanAutomation IPscan test automation]] - a quick overview of IPv6 TCP/UDP port scan automation using wget
+* [[ScanAutomation]] - a quick overview of IPv6 TCP/UDP port scan automation using wget
-* [[IPv6_DEBUG IPscan Debug]] - some steps for debugging IPv6 access to my IPv6 Port Scanner
+* [[IPv6_DEBUG]] - some steps for debugging IPv6 access to my IPv6 Port Scanner
-* [[IPv6_Windows7 Windows 7 IPv6]] - some useful Win7 IPv6-related commands
+* [[IPv6_Windows7]] - some useful Win7 IPv6-related commands
-* [[Raspberry_Pi_IPv6_firewall_tester RasPi IPv6 Firewall tester]] - a quick HowTo describing the steps to make your own RasPi-powered IPv6 firewall tester.
+* [[Raspberry_Pi_IPv6_firewall_tester]] - a quick HowTo describing the steps to make your own RasPi-powered IPv6 firewall tester.