module Dnsruby

  #Dnsruby::IPv6 class

  class IPv6

    #IPv6 address format a:b:c:d:e:f:g:h

    Regex_8Hex = /\A

    #Compresses IPv6 format a::b

    # IPv4 mapped IPv6 address format a:b:c:d:e:f:w.x.y.z

    # Compressed IPv4 mapped IPv6 address format a::b:w.x.y.z

    # A composite IPv6 address RegExp

    # Created a new IPv6 address from +arg+ which may be:

    #

  # 

  # IPAddress::IPv6 - IP version 6 address manipulation library

  # 

  # Class IPAddress::IPv6 is used to handle IPv6 type addresses. 

  #

  # == IPv6 addresses

  #

  # IPv6 addresses are 128 bits long, in contrast with IPv4 addresses

  # which are only 32 bits long. An IPv6 address is generally written as

  # eight groups of four hexadecimal digits, each group representing 16

  # bits or two octect. For example, the following is a valid IPv6

  #

  # Letters in an IPv6 address are usually written downcase, as per

  # RFC. You can create a new IPv6 object using uppercase letters, but

  # they will be converted.

	# AddrIpv6 handles addressing for IPv6Header

	#  Int32 :a4

	class AddrIpv6 < Struct.new(:a1, :a2, :a3, :a4)

		# Reads in a string and casts it as an IPv6 address

		# Reads in a colon-delimited hex string and casts it as an IPv6 address.

	# IPv6Header is complete IPv6 struct, used in IPv6Packet. 

	#

	#  Fixnum (4 bits)   :ipv6_v      Default: 6     # Versiom

	#  Fixnum (8 bits)   :ipv6_class  Defualt: 0     # Class

	#  Fixnum (20 bits)  :ipv6_label  Defualt: 0     # Label

	#  Int16             :ipv6_len    Default: calc  # Payload length

    # Sets up resolution with IPv6 support if the address is an ip

    # @since 2.0.0

    class IPv6

      # The regular expression to use to match an IPv6 ip address.

      # Parse an IPv6 address into its host and port.

      # Initialize the IPv6 resolver.

      # @example Initialize the resolver.

      #   IPv6.new("::1", 28011, 'localhost')

      #

      # @example Get an IPv6 socket.

# Cookbook Name:: nginx

# Recipe:: ipv6

node.run_state['nginx_configure_flags'] =

  node.run_state['nginx_configure_flags'] | ['--with-ipv6']

#

# This module provides common tools for IPv6

###

module Exploit::Remote::Ipv6

        OptString.new("SMAC", [ false, "The source MAC address"]),

        OptAddress.new("SHOST", [ false, "The source IPv6 address" ] ),

        OptInt.new("TIMEOUT", [ true, "Timeout when waiting for host response.", 5])

      ], Msf::Exploit::Remote::Ipv6

  #

  def ipv6_interface(opts={})

  #

  def ipv6_link_address(opts={})

    Rex::Socket.ipv6_link_address(ipv6_interface(opts))

  end

  #

  def ipv6_mac(opts={})

    Rex::Socket.ipv6_mac(ipv6_interface(opts))

#

# This module provides common tools for IPv6

###

module Exploit::Remote::Ipv6

				OptString.new("SMAC", [ false, "The source MAC address"]),

				OptAddress.new("SHOST", [ false, "The source IPv6 address" ] ),

				OptInt.new("TIMEOUT", [ true, "Timeout when waiting for host response.", 5])

			], Msf::Exploit::Remote::Ipv6

	#

	def ipv6_interface(opts={})

	#

	def ipv6_link_address(opts={})

		Rex::Socket.ipv6_link_address(ipv6_interface(opts))

	end

	#

	def ipv6_mac(opts={})

		Rex::Socket.ipv6_mac(ipv6_interface(opts))

	# AddrIpv6 handles addressing for IPv6Header

	#  Int32 :a4

	class AddrIpv6 < Struct.new(:a1, :a2, :a3, :a4)

		# Reads in a string and casts it as an IPv6 address

		# Reads in a colon-delimited hex string and casts it as an IPv6 address.

	# IPv6Header is complete IPv6 struct, used in IPv6Packet. 

	#

	#  Fixnum (4 bits)   :ipv6_v      Default: 6     # Versiom

	#  Fixnum (8 bits)   :ipv6_class  Defualt: 0     # Class

	#  Fixnum (20 bits)  :ipv6_label  Defualt: 0     # Label

	#  Int16             :ipv6_len    Default: calc  # Payload length

	# AddrIpv6 handles addressing for IPv6Header

	#  Int32 :a4

	class AddrIpv6 < Struct.new(:a1, :a2, :a3, :a4)

		# Reads in a string and casts it as an IPv6 address

		# Reads in a colon-delimited hex string and casts it as an IPv6 address.

	# IPv6Header is complete IPv6 struct, used in IPv6Packet. 

	#

	#  Fixnum (4 bits)   :ipv6_v      Default: 6     # Versiom

	#  Fixnum (8 bits)   :ipv6_class  Defualt: 0     # Class

	#  Fixnum (20 bits)  :ipv6_label  Defualt: 0     # Label

	#  Int16             :ipv6_len    Default: calc  # Payload length

# $Id: ipv6.rb 14 2008-03-02 05:42:30Z warchild $

#

module L3

# Internet Protocol Version 6 (IPV6)

# RFC2460

class IPv6 < RacketPart

#

# This module provides common tools for IPv6

###

module Exploit::Remote::Ipv6

				OptString.new("SMAC", [ false, "The source MAC address"]),

				OptAddress.new("SHOST", [ false, "The source IPv6 address" ] ),

				OptInt.new("TIMEOUT", [ true, "Timeout when waiting for host response.", 5])

			], Msf::Exploit::Remote::Ipv6

	#

	def ipv6_interface(opts={})

	#

	def ipv6_link_address(opts={})

		Rex::Socket.ipv6_link_address(ipv6_interface(opts))

	end

	#

	def ipv6_mac(opts={})

		Rex::Socket.ipv6_mac(ipv6_interface(opts))

# Cookbook Name:: nginx

# Recipe:: ipv6

node.run_state['nginx_configure_flags'] =

  node.run_state['nginx_configure_flags'] | ["--with-ipv6"]

  #   listen "/path/to/.unicorn.sock" # listen on the given Unix domain socket

  #   listen "[::1]:3000" # listen to port 3000 on the IPv6 loopback interface

  #

  # [:ipv6only => true or false]

  #

  #   This option makes IPv6-capable TCP listeners IPv6-only and unable

  #

  #   Enabling this option for the IPv6-only listener and having a

  #   separate IPv4 listener is recommended if you wish to support IPv6

  #   on the same TCP port.  Otherwise, the value of \env[\"REMOTE_ADDR\"]

  #   will appear as an ugly IPv4-mapped-IPv6 address for IPv4 clients

      end

      [ :tcp_nodelay, :tcp_nopush, :ipv6only ].each do |key|

  ].each { |invalid_ip|

    describe "when the pattern is an invalid IPv6 address such as #{invalid_ip}" do

    "::", # unspecified, compressed, non-routable

    "0:0:0:0:0:0:13.1.68.3", # IPv4-compatible IPv6 address, full, deprecated

    "0:0:0:0:0:FFFF:129.144.52.38", # IPv4-mapped IPv6 address, full

    "::13.1.68.3", # IPv4-compatible IPv6 address, compressed, deprecated

    "::FFFF:129.144.52.38", # IPv4-mapped IPv6 address, compressed

    "2001:0DB8:0000:CD30:0000:0000:0000:0000/60", # full, with prefix

        expect( service('iptables')).to be_running

        if $environment['ipv6Enabled']

    # STIG Viewer Link: http://www.stigviewer.com/check/V-38546

    it "V-38546 The IPv6 protocol handler must not be bound to the network stack unless needed." do

        # Check: If the system uses IPv6, this is not applicable.

        #       If the system is configured to prevent the loading of the "ipv6" kernel module, it will contain a line of the form: 

        #       options ipv6 disable=1

        #       Such lines may be inside any file in "/etc/modprobe.d" or the deprecated "/etc/modprobe.conf". This permits insertion of the IPv6 kernel module (which other parts of the system expect to be present), but otherwise keeps it inactive. Run the following command to search for such lines in all files in "/etc/modprobe.d" and the deprecated "/etc/modprobe.conf": 

        #       $ grep -r ipv6 /etc/modprobe.conf /etc/modprobe.d

        #       If the IPv6 kernel module is loaded, this is a finding.

        if $environment['ipv6Enabled']

            pending("Not applicable")

        else

            expect( command('grep -r ipv6 /etc/modprobe.d') ).not_to return_stdout ""

        end

# IPAddr provides a set of methods to manipulate an IP address.  Both IPv4 and

# IPv6 are supported.

#

#   p ipaddr1                   #=> #<IPAddr: IPv6:3ffe:0505:0002:0000:0000:0000:0000:0001/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff>

#

#   ipaddr2 = ipaddr1.mask(48)  #=> #<IPAddr: IPv6:3ffe:0505:0002:0000:0000:0000:0000:0000/ffff:ffff:ffff:0000:0000:0000:0000:0000>

  # Returns true if the ipaddr is an IPv4-mapped IPv6 address.

  def ipv4_mapped?

    return ipv6? && (@addr >> 32) == 0xffff

  # Returns true if the ipaddr is an IPv4-compatible IPv6 address.

  def ipv4_compat?

    if !ipv6? || (@addr >> 32) != 0

  # Returns a new ipaddr built by converting the native IPv4 address

  # into an IPv4-mapped IPv6 address.

  it 'should not apply other ip6tables rules' do

    ipv6 = shell_out('ip6tables -L -n |wc -l')

    ipv6.stdout.must_include('8')

    ipv6 = shell_out('ip6tables -L -n -t mangle |wc -l')

    ipv6.stdout.must_include('14')

    ipv6 = shell_out('ip6tables -L -n -t raw |wc -l')

    ipv6.stdout.must_include('5')

  end

    ipv6 = shell_out('ip6tables -L -n')

    ipv6.stdout.must_include('Chain INPUT (policy ACCEPT)')

    ipv6.stdout.must_include('Chain OUTPUT (policy ACCEPT)')

    ipv6.stdout.must_include('Chain FORWARD (policy ACCEPT)')

    def valid_v6?(addr)

      # IPv6 (normal)

      return true if /\A::([\dA-Fa-f]{1,4}(:[\dA-Fa-f]{1,4})*)?\Z/ =~ addr

      # IPv6 (IPv4 compat)

# IPAddr provides a set of methods to manipulate an IP address.  Both IPv4 and

# IPv6 are supported.

#

#   p ipaddr1			#=> #<IPAddr: IPv6:3ffe:0505:0002:0000:0000:0000:0000:0001/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff>

  # Returns a new ipaddr built by converting the native IPv4 address

  # into an IPv4-mapped IPv6 address.

  # Returns a new ipaddr built by converting the native IPv4 address

  # into an IPv4-compatible IPv6 address.

  # Returns a new ipaddr built by converting the IPv6 address into a

  # native IPv4 address.  If the IP address is not an IPv4-mapped or

  # IPv4-compatible IPv6 address, returns self.

    def use_ipv6?

      end

      list.any? {|a| a.ipv6? && !a.ipv6_loopback? && !a.ipv6_linklocal? }

    end

    private :use_ipv6?

    #

    # +address+ must be a Resolv::IPv4, Resolv::IPv6 or a String.  Retrieved

    #

    # +address+ must be a Resolv::IPv4, Resolv::IPv6 or a String.  Retrieved

        ##

        # An IPv6 address record.

          def initialize(address)

            @address = IPv6.create(address)

          ##

          # The Resolv::IPv6 address for this AAAA.

# * /etc/nsswitch.conf is not supported.

# * IPv6 is not supported.

    # +name+ can be a Resolv::DNS::Name or a String.  Retrieved addresses will

    # be a Resolv::IPv4 or Resolv::IPv6

    #

    # +address+ must be a Resolv::IPv4, Resolv::IPv6 or a String.  Retrieved

    #

    # +address+ must be a Resolv::IPv4, Resolv::IPv6 or a String.  Retrieved

    #

    # +address+ must be a Resolv::IPv4, Resolv::IPv6 or a String.  Retrieved

        ptr = IPv4.create(address).to_name

      when IPv6::Regex

        ptr = IPv6.create(address).to_name

  ##

  # A Resolv::DNS IPv6 address.

  class IPv6