Script address-info

Script types: hostrule
Categories: default, safe
Download: https://svn.nmap.org/nmap/scripts/address-info.nse

Script Summary

Shows extra information about IPv6 addresses, such as embedded MAC or IPv4 addresses when available.

Some IP address formats encode extra information; for example some IPv6 addresses encode an IPv4 address or MAC address. This script can decode these address formats:

  • IPv4-compatible IPv6 addresses,
  • IPv4-mapped IPv6 addresses,
  • Teredo IPv6 addresses,
  • 6to4 IPv6 addresses,
  • IPv6 addresses using an EUI-64 interface ID,
  • IPv4-embedded IPv6 addresses,
  • IPv4-translated IPv6 addresses and
  • ISATAP Modified EUI-64 IPv6 addresses.

See RFC 4291 for general IPv6 addressing architecture and the definitions of some terms.

Example Usage

nmap -sV -sC <target>

Script Output 

Nmap scan report for ::1.2.3.4
Host script results:
| address-info:
|   IPv4-compatible:
|_    IPv4 address: 1.2.3.4

Nmap scan report for ::ffff:1.2.3.4
Host script results:
| address-info:
|   IPv4-mapped:
|_    IPv4 address: 1.2.3.4

Nmap scan report for 2001:0:506:708:282a:3d75:fefd:fcfb
Host script results:
| address-info:
|   Teredo:
|     Server IPv4 address: 5.6.7.8
|     Client IPv4 address: 1.2.3.4
|_    UDP port: 49802

Nmap scan report for 2002:102:304::1
Host script results:
| address-info:
|   6to4:
|_    IPv4 address: 1.2.3.4

Nmap scan report for fe80::a8bb:ccff:fedd:eeff
Host script results:
| address-info:
|   IPv6 EUI-64:
|     MAC address:
|       address: aa:bb:cc:dd:ee:ff
|_      manuf: Unknown

Nmap scan report for 64:ff9b::c000:221
Host script results:
| address-info:
|   IPv4-embedded IPv6 address:
|_    IPv4 address: 192.0.2.33

Nmap scan report for ::ffff:0:c0a8:101
Host script results:
| address-info:
|   IPv4-translated IPv6 address:
|_    IPv4 address: 192.168.1.1

Requires

Author:

  • David Fifield

License: Same as Nmap--See https://nmap.org/book/man-legal.html