This method will find all IPv6 enabled hosts that listen to a well-known multicast address.
Compared with an IPv4 ping-sweep this method is more effective because it sends a SINGLE packet. By exploiting a security
vulnerability that I have found in the design of the ICMPv6 protocol (see RFC 2463),
CHScanner will build and send a single packet and all IPv6 enabled hosts that listen on the
specified multicast address will reply.
I have successfully tested this behaviour against the following operating systems:
To specify a multicast address set it as :
For this method the Operating System Mimic technology is NOT implemented yet.
The payload of the packets is in Windows XP style.
[ User Guide | Scan Methods ]