IPv6 Security: Attacking SLAAC and Neighbor Discovery Spoofing

Added: 2026-05-05

[00:00:00]IPv6 Security, Unveiling SLAAC and Neighbor Discovery Spoofing.

[00:00:05]Welcome to this educational demonstration where we explore IPv6 security vulnerabilities focusing on SLAAC and Neighbor Discovery Spoofing.

[00:00:14]Remember, this is strictly for educational purposes to help you understand network security better.

[00:00:21]First, let's check our current network configuration to see our IPv6 address.

[00:00:27]Here we can see the link-local address assigned to our interface.

[00:00:31]Using radvdump, we capture router advertisement messages.

[00:00:35]These messages are crucial for stateless address auto configuration or SLAAC where devices configure their own IPv6 addresses without a DHCP server.

[00:00:45]The tool parasite6 is designed to send spoofed router advertisements.

[00:00:50]By doing this, we can trick devices into configuring themselves with a rogue IPv6 address, potentially redirecting traffic.

[00:00:59]Next, we use ndp6 to send neighbor solicitations.

[00:01:03]This step is part of the neighbor discovery protocol which is essential for resolving IPv6 addresses to MAC addresses.

[00:01:10]Let's see how we can manipulate this.

[00:01:13]By sending a fake neighbor advertisement, we can poison the neighbor cache of a victim machine.

[00:01:19]This can redirect traffic intended for a legitimate device to our attacking machine showcasing a significant vulnerability in IPv6.

[00:01:28]Finally, we verify the current neighbor cache using Notice how the fake MAC address is now associated with the spoofed IPv6 address demonstrating the impact of our spoofing attack.