ipv6finder.sh

#!/bin/bash
#__________________________________________________________
# Author:     phillips321 contact through phillips321.co.uk
# License:    CC BY-SA 3.0
# Use:        ipv6 finder
# Released:   www.phillips321.co.uk
  version=0.8
# Dependencies:
#	arp-scan, sudo
# ChangeLog
#   v0.8    Dropped MacOS support, added support for older Linux, removed ifconfig dependency, cleaned up
#   v0.7    Incremented version numbers properly - whoops!
#   v0.6    Added bug where arp-scan comes back with Duplicates (DUP)
#   v0.5    Checks if there is a local Global IPv6 Address
#   v0.4    Added Global host discovery
# ToDo:
#	use MAC address as unique key

f_main(){
    #Ping multicast address for local neighbours and store as LinkLocalNeighbours
    echo -n "[+]Pinging (ff02::1) multicast for nodes on link local. "
    LinkLocalNeighbours=$(ping6 -c 3 -I ${interface} ff02::1 | grep icmp_seq | cut -d" " -f4 | cut -d"," -f 1 | sort -u)
    echo "Done"

    #Ping multicast address for router neighbours and store as RouterLocalNeighbours
    echo -n "[+]Pinging (ff02::2) multicast for routers. "
    RouterLocalNeighbours=$(ping6 -c 3 -I ${interface} ff02::2 | grep icmp_seq | cut -d" " -f4 | cut -d"," -f 1 | sort -u)
    echo "Done"

    #Ping multicast address for global neighbours and store as GlobalNeighbours
    echo -n "[+]Pinging (ff02::1) multicast for nodes on Global Interface. "
    IPV6Address=$(ip -6 addr | grep "inet6" | grep -v "::1" | grep -v "fe80"| grep -Ev "inet6\ f(c|d)" | grep -v "temporary" | awk {'print $2'} | cut -d"/" -f1)
    if [ ! -z ${IPV6Address} ]; then
        GlobalNeighbours=$(ping6 -c 3 -I ${IPV6Address} ff02::1 | grep icmp_seq | cut -d" " -f4 | cut -d"," -f 1 | sort -u | rev | cut -c 2- | rev)
        { for i in ${GlobalNeighbours} ; do ping6 -c 1 -I ${interface} $i ; done } &> /dev/null
    else
        IPV6Address=""; GlobalNeighbours=""
    fi
    echo "Done"

    echo -n "[+]ArpScanning local IPv4. (if you are not running as root, you will be prompted for your password by sudo) "
    ArpScan=$(sudo arp-scan -l -I ${interface} | grep -v packets | grep -v DUP | grep -v ${interface} | grep -v Starting | grep -v Ending | cut -f1,2)
    echo "Done"

    echo "-----------------------------------------|------------------------------------------|--------------------|--------------------|-------------"
    printf "%40s %1s %40s %1s %18s %1s %18s %1s %12s\n" "IPv6 Link Local" "|" "IPv6 Global" "|" "MAC Address" "|" "IPv4 Address" "|" "Info"
    echo "-----------------------------------------|------------------------------------------|--------------------|--------------------|-------------"
    for IPV6LL in ${LinkLocalNeighbours}; do
        # Remove interface identifier (if any)
        IPV6LL=$(echo ${IPV6LL} | head -n1 | cut -d"%" -f1 | sed "s/:\$//g")
        IPV6LL_WITH_INTERFACE="${IPV6LL}%${interface}"

        #Get LinkLocal MAC from NDP table
        ShortMAC=$(ip -6 neigh show ${IPV6LL} | awk {'print $5'} | sed 's/0\([0-9A-Fa-f]\)/\1/g')
        LongMAC=$(ip -6 neigh show ${IPV6LL} | awk {'print $5'})
        if [ -z ${ShortMAC} ] ; then ShortMAC=$(cat /sys/class/net/${interface}/address | sed 's/0\([0-9A-Fa-f]\)/\1/g'); fi
        if [ -z ${LongMAC} ] ; then LongMAC=$(cat /sys/class/net/${interface}/address); fi

        #Use MAC to pair up with IPv4 address and global IPv6
        if [ ! -z ${ShortMAC} ]; then
            IPV4Address=$(echo "${ArpScan}" | grep "${LongMAC}" | head -n1 | cut -f1)
            IPV6G=""
            IPV6G=$(ip -6 neigh show | grep "${LongMAC}" | grep -v fe80 | awk {'print $1'} | head -n 1)
            if [ -z ${IPV6G} ]; then
                IPV6G="NotFound"
                cat /sys/class/net/${interface}/address | grep -q ${LongMAC}
                if [ $? -eq 0 ]; then
                    IPV6G=$IPV6Address
                fi
            fi
        fi

        #IPv4 not found so might be you or not in subnet?
        if [ -z ${IPV4Address} ]; then #Unable to find IPv4 so possibly you
            IPV4Address=$(ip -4 addr show ${interface} | sed -En 's/127.0.0.1//;s/.*inet (addr:)?(([0-9]*\.){3}[0-9]*).*/\2/p')
            Info="You?"
        else #IPv4 found so now decididng if router or not
            if (echo "$RouterLocalNeighbours" | grep -q ${IPV6LL}) ; then Info="Router"; else Info="Node" ; fi
        fi
        if [ -z ${IPV4Address} ]; then IPV4Address="NotFound" ; Info="IPv6only?" ; fi
        if [[ ${LongMAC} == *"incomplete"* ]]; then LongMAC="00:00:00:00:00:00" ; fi
        printf "%40s %1s %40s %1s %18s %1s %18s %1s %12s\n" ${IPV6LL_WITH_INTERFACE} "|" ${IPV6G} "|" ${LongMAC} "|" ${IPV4Address} "|" ${Info}
    done
    echo "-----------------------------------------|------------------------------------------|--------------------|--------------------|-------------"
}

f_usage(){ #echo usage
	echo "[+] ipv6finder.sh v${version}"
	echo "[+] Usage: ipv6finder.sh [{interface}]"
	echo "[+] Example: ipv6finder.sh eth0"
  exit 1
}

hash arp-scan 2>/dev/null || { echo >&2 "[+] I require arp-scan but it's not installed.  Aborting."; exit 1; }

if [[ $1 = "" ]] ; then
	f_usage
else
	interface=$1
fi

f_main
exit 0