6Guard (IPv6 attack detector) Logo

6Guard (IPv6 attack detector)

0
Free
Visit Website

6Guard is an IPv6 attack detector aiming at link-local level security threats, including most attacks initiated by the THC-IPv6 suit and the advanced host discovery methods used by Nmap. It can help the network administrators detect the link-local IPv6 attacks in the early stage. 6Guard is sponsored by Google Summer of Code 2012 and supported by The Honeynet Project organization. The project page is at Project 9 - IPv6 attack detector (Xu). Here is an example of the attacking alert message provided by 6Guard. [ATTACK] Timestamp: 2012-08-19 14:48:27 Reported by: Honeypot-apple-2A:C4:2D Type: DoS Name: Fake Echo Request Attacker: [Unknown] 00:00:de:ad:be:ef (CETIA) Victim : [Honeypot-apple-2A:C4:2D] 40:3C:FC:2A:C4:2D (Apple, Inc.) Utility: THC-IPv6: smurf6 Packets: b12fe3415c1d61c1da085cb8811974a2.pcap Installation Download and install Scapy in your machine. (Or apt-get install python-scapy) Download the latest code from Github/mzweilin/ipv6-attack-detector and extract it into a directory. Usage Enter the directory of 6Guard. Run $ sudo ./conf_generator.py to generate the configuration files. Run $ sudo ./6guadrd.py. Note If it is the first t

FEATURES

ALTERNATIVES

A simple honeypot that opens a listening socket and waits for connection attempts, with configurable reply and event handling

DenyHosts is a script to block SSH server attacks by automatically preventing attackers after failed login attempts.

High-performance remote packet capture and collection tool used for forensic analysis in cloud workloads.

Automate mass scanning of technologies used on websites

A tool for extracting common indicators of compromise from a block of text.

A tool for enumerating subdomains of a given domain

An HTTP proxy, monitor, and reverse proxy tool for viewing HTTP and SSL/HTTPS traffic.

Accurate detection of HTTPS interception and robust TLS fingerprinting tool.