IPv6ã§ã®Webトラフィックãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯æ‰‹æ³•:Geekãªãºãƒ¼ã˜
IPv6ã«ã¯ã€æ˜”ã‹ã‚‰ã‚ˆã知られã¦ã„ã‚‹å½RAã®å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§ã¯ã€ã²ã¨ã¤ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã«è¤‡æ•°ã®IPv6ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¿½åŠ å¯èƒ½ã§ã‚ã£ãŸã‚Šã€è‡ªåˆ†ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã«è¨å®šã•ã‚Œã¦ã„ãªã„プレフィックスãŒon-linkã«ãªã‚‹å ´åˆã‚‚ã‚ã‚‹ã¨ã„ã†IPv6ã®ç‰¹å¾´ã‚„ã€å½RAã«ã‚ˆã£ã¦ä½•ãŒèµ·ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã‹ã‚’解説ã™ã‚‹ãŸã‚ã«ã€åŒä¸€ãƒªãƒ³ã‚¯ä¸Šã«ã„るユーザã®WebトラフィックãŒãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯å¯èƒ½ã§ã‚ã‚‹ã¨ã„ã†è¦–点ã§å½RAå•é¡Œã‚’解説ã—ã¾ã™ã€‚ Router Advertisementã®å•é¡Œ IPv6ã«ã¯Router Advertisement(RA)ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚ RAã¯ã€IPv6ã®Neighbor Discoveryã§ä½¿ã‚れる仕組ã¿ã§ã™ã€‚ RAã¯ã€ãƒ«ãƒ¼ã‚¿ãŒè‡ªåˆ†ã®å˜åœ¨ã‚’知らã›ã‚‹ã¨ã¨ã‚‚ã«ã€MTUãªã©ã®ãƒªãƒ³ã‚¯ã«é–¢é€£ã™ã‚‹æƒ…å ±ã‚„ã€ãƒ—ãƒ¬ãƒ•ã‚£ãƒƒã‚¯ã‚¹æƒ…å ±ãªã©ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«é–¢é€£ã™ã‚‹æƒ…å ±ã‚’åºƒå‘Šã™ã‚‹ãŸã‚
Free IP address to ASN database
IPv4 to ASN map Download ip2asn-v4.tsv (TAB-separated values) Download ip2asn-v4-u32.tsv (TAB-separated values, IPv4 addresses as 32-bit unsigned integers) Format: range_start range_end AS_number country_code AS_description IPv6 to ASN map Download ip2asn-v6.tsv (TAB-separated values) Format: range_start range_end AS_number country_code AS_description Combined IPv4+IPv6 to ASN map Download ip2asn-
python ã® netaddr 㧠ipï¼–( ipv6) アドレスを扱ㆠ- ãれマグã§ï¼
å‰ã®ã€ipv6 版ã§ã™ã€ ip アドレスを計算を簡便ã«ã™ã‚‹ãƒ©ã‚¤ãƒ–ラリãŒã‚ã£ãŸã®ã§ä½¿ã£ã¦ã¿ã‚‹ã“ã¨ã«ã—ãŸã€‚ ライブラリをèªã¿è¾¼ã‚€ インストールã™ã‚‹ã€‚ $ pip install netaddr 使ã†æº–備をã™ã‚‹ã€‚ from netaddr import * v4/ v6 ã¨ã‚‚ã«åŒã˜ãƒ©ã‚¤ãƒ–ラリã§æ‰±ã†ã“ã¨ãŒå‡ºæ¥ã¾ã™ã€‚ ip6アドレス(ãƒãƒƒãƒˆãƒžã‚¹ã‚¯å«ã‚€ï¼‰ã‚’扱ã†ã€‚ サブãƒãƒƒãƒˆãƒžã‚¹ã‚¯è¡¨è¨˜ã‚’å«ã‚€å ´åˆã¯ IPNetwork　を使ã†ã€‚ >>> ip = IPNetwork('fdc2:be69:2aeb:bd6c::1/64') >>> ip.ip IPAddress('fdc2:be69:2aeb:bd6c::1') >>> ip.network IPAddress('fdc2:be69:2aeb:bd6c::') >>> ip.netmask IPAddress('ffff:ffff:ffff:ffff::
ipv6 ã®ãƒªãƒ³ã‚¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’使ㆠ- ãれマグã§ï¼
ipv6 ã§é€šä¿¡ã—ãŸã„ ipv6 を有効ã«ã™ã‚‹ã¨ã€ã„ã£ã±ã„アドレスãŒå‰²ã‚ŠæŒ¯ã‚‰ã‚Œã¦æ°—æŒã¡æ‚ªã„。 ãŸãã•ã‚“割り振られるアドレスã®ãªã‹ã§ã‚‚ã€fe80 ã‹ã‚‰å§‹ã¾ã‚‹v6アドレスを リンクãƒãƒ¼ã‚«ãƒ«ãƒ»ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ã„ã†ã€‚英語ã§ã¯ link-local ã¨è¡¨è¨˜ã•ã‚Œã¾ã™ã€‚ v6リンクãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ã¯ã€‚ v6ã®ãƒªãƒ³ã‚¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ã€IPv4 169.254.*.* ã¨åŒæ§˜ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã™ã€‚ ホスト間ã§é€šä¿¡ã‚’１対１ã§è¡Œã†äº‹ãŒã§ãã¾ã™ã€‚ åŒä¸€ãƒªãƒ³ã‚¯å†…ã€ã¤ã¾ã‚Šã‚¹ã‚¤ãƒƒãƒãƒ³ã‚°ãƒãƒ–を通ã—ã¦é€šä¿¡ã§ãる範囲（ã“れをリンクã¨ã„ã†ï¼‰ã§æœ‰åŠ¹ã§ã™ã€‚ ãƒãƒ–ã§æŽ¥ç¶šã•ã‚ŒãŸãƒ›ã‚¹ãƒˆé–“ã§é€šä¿¡ãŒå¯èƒ½ã«ãªã‚‹ã®ãŒã€ãƒªãƒ³ã‚¯ãƒãƒ¼ã‚«ãƒ«ã®å½¹å‰²ã§ã™ã€‚ 言ã„æ›ãˆã‚Œã°ã€ãƒªãƒ³ã‚¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ã€çµŒè·¯ã‚’æŒã¡ãˆã¾ã›ã‚“。 経路表を使ã£ãŸä¼é€ã¯ã§ãã¾ã›ã‚“。 v6 リンクãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹é–“ã§é€šä¿¡ã‚’è¡Œã†ã€‚ ホストAã¨ãƒ›ã‚¹ãƒˆBã®ãƒªãƒ³ã‚¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’確èªã—ã¾ã™ã€‚ リンクãƒãƒ¼
openssl 㨠sed ã§ipv6 ã®ULAプレフィックスを作る（IPv6アドレスã®ãƒ©ãƒ³ãƒ€ãƒ 生æˆï¼‰ - ãれマグã§ï¼
ULAã®Prefixを生æˆã™ã‚‹ãªã‚‰ openssl rand -hex 5 | sed -r 's|^(.{2})(.{4})(.{4})|fd\1:\2:\3::/48|' ãƒãƒ¼ã‚«ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ—レフィックスã®å ´åˆã¯ã€ prefix ã«16ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ»ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’付ã‘る。ã¾ã¨ã‚ã¦ãƒ©ãƒ³ãƒ€ãƒ 生æˆã™ã‚‹ã¨ã€‚ openssl rand -hex 7 | sed -r 's|^(.{2})(.{4})(.{4})(.{4})|fd\1:\2:\3:\4::/64|' 実行例 root@router01:~# openssl rand -hex 5 | sed -r 's|^(.{2})(.{4})(.{4})|fd\1:\2:\3::/48|' fd8b:9230:0268::/48 root@router01:~# openssl rand -hex 7 | sed -r 's|^(.{2})(.
GitHub - hrbrmstr/securitytrails: 🕵ðŸ¼â€â™‚ï¸Tools to Query the ‘SecurityTrails’ ‘API’
IPv6アドレススã‚ャン攻撃:Geekãªãºãƒ¼ã˜
IPv4ã§ã¯ã€ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚¹ã‚ャン攻撃やãƒãƒ¼ãƒˆã‚¹ã‚ャン攻撃ã¯æ—¥å¸¸çš„ã«è¡Œã‚ã‚Œã¦ã„ã¾ã™ã€‚ ファイアウォールãªã—ã®çŠ¶æ…‹ã§ã‚°ãƒãƒ¼ãƒãƒ«IPv4アドレスã«æŽ¥ç¶šã—ã¦ã„ã‚Œã°ã€ã™ãã«æ”»æ’ƒã‚’観測ã§ãã¾ã™ã€‚ IPv6ã§ã‚‚アドレススã‚ャン攻撃ã¯ç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ç§ã®å®¶ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ã‚‚ã€IPv6ã§ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚¹ã‚ャン狙ã„ã¨æŽ¨æ¸¬ã•ã‚Œã‚‹ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’ç°¡å˜ã«è¦³æ¸¬ã§ãã¾ã—ãŸã€‚ ãŸã ã€ã„ã¾ã®ã¨ã“ã‚ã€ç§ã®å®¶ã§ã¯ã€å®Ÿéš›ã«åˆ©ç”¨ã—ã¦ã„ã‚‹IPv6アドレスを外部ã‹ã‚‰ç™ºè¦‹ã§ãã¦ã„るよã†ãªã‚¹ã‚ャンã®å½¢è·¡ã‚’発見ã§ãã¦ãŠã‚‰ãšã€ä¸»ã«ã‚¹ãƒ†ãƒ¼ãƒˆãƒ•ãƒ«DHCPv6や手動è¨å®šã§ã®IPv6アドレスを探ã—ã¦ã„るよã†ã«è¦‹ãˆã¾ã—ãŸã€‚ ã‚„ã¯ã‚Šã€IPv4ã¨æ¯”ã¹ã‚‹ã¨ã€IPv6ã®æ–¹ãŒIPv6アドレススã‚ャン攻撃ã®é›£æ˜“度ã¯é«˜ã„ã®ã ã‚ã†ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã“ã¨ã§ã€IPv6ã§ã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚¹ã‚ャン攻撃やã€ãã®ä»–方法ã«ã‚ˆã£ã¦ã€ç¨¼åƒã—ã¦ã„ã‚‹IPv6アドレスをã©ã®ã‚ˆã†ã«æŽ¢ã™ã®ã‹ã«é–¢ã—ã¦è§£èª¬ã—ã¦
WHOISã®ä»£ã‚ã‚Šã¨ãªã‚‹RDAPを使ã£ã¦ã¿ãŸ - Qiita
RDAPã¨ã¯ Registration Data Access Protocol (RDAP) ... ICANNより WHOISã®ä»£æ›¿ã¨ãªã‚‹å¾Œç¶™ãƒ—ãƒãƒˆã‚³ãƒ« å¿œç”å½¢å¼ã®æ¨™æº–化を目指ã—ã¦ã„ã‚‹ jSONã§ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãŒè¿”ã£ã¦ãã‚‹ã“ã¨ãŒç‰¹å¾´çš„ 値をå–å¾—ã—ã¦ã¿ã‚‹ HTTP/HTTPS経由ã§å€¤ã‚’å–å¾—ã§ãã‚‹ã“ã¨ãŒç‰¹å¾´ï¼ˆRESTful API) IPv6ã«ã‚‚対応ã—ã¦ã„ã‚‹ãŸã‚ APNICãŒæä¾›ã—ã¦ã„ã‚‹RDAPã‚’å‚考ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å¾—ã‚‹ã“ã¨ãŒã§ãる。 http://rdap.apnic.net/ip/2001:dc0:2001:11::194 https://rdap.apnic.net/ip/2001:dc0:2001:11::194 ã‚ã‹ã‚Šã‚„ã™ã„フォーマットを用æ„ã—ã¦ã„ã‚‹ã®ã§ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã‚れ㰠ã“ã®ã‚ˆã†ã«å€¤ã‚’ã„れるã¨whoisã®ã‚ˆã†ã«å¿…è¦ãªå€¤ã‚’å–å¾—ã™ã‚‹ã“ã¨ãŒã§ãる。 ex) https://rd
GitHub - lavalamp-/ipv666: Golang IPv6 address enumeration
NOTE - This software was previously licensed under GPLv3 and has since been updated to BSD. ipv666 is a set of tools that enables the discovery of IPv6 addresses both in the global IPv6 address space and in more narrow IPv6 network ranges. These tools are designed to work out of the box with minimal knowledge of their workings. As of v0.4 we have provided functionality into the tool set wherein yo
ãŠçŸ¥ã‚‰ã›
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - emden-norfolk/cidrl: List all IP addresses within a CIDR block.
prips in python - support ipv6
GitHub - idealeer/xmap: XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.
Internet Hygiene Portal
Subnet Lookup Online | HackerTarget.com
GitHub - risksense/ipaddr: IP Address utilities
GitHub - seancfoley/IPAddress: Java library for handling IP addresses and subnets, both IPv4 and IPv6
GitHub - gersak/clojure.network.ip: Clojure library for network manipulation
There’s No Place Like ::1 — Enumerating Local IPv6 networks
GitHub - apg-intel/ipv6tools: IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.
https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1510592538.pdf
{{#tags}}- {{label}}
{{/tags}}