Bisers: An Efficient DHCPv6 Bounding Solution

Network scanning is essential to penetration testing, but the IPv6 network is difficult to scan because of the ample address space. For IPv6 networks managed using DHCPv6, detecting a precise range of DHCPv6 server assigned addresses helps narrow the scope of network scanning. For a DHCPv6 server that uses a continuous address allocation strategy, the boundary of this range is the first and last address it allocates; For a DHCPv6 server that uses a random address allocation strategy, this range is its address pool. We call the process of finding this range the DHCPv6 bounding. In this paper, we propose Bisers, an efficient DHCPv6 bounding solution that can quickly and accurately implement DHCPv6 bounding and effectively help scan IPv6 networks managed using DHCPv6.