IPV6

Host enum:

#ping6
ping6 -c2 -I eth1 ff02::1
#nmap scan host
nmap -6 -e eth1 -sSVC -F fe80::217:f2ff:fe0f:5d19
#msfconsole 
msf > use auxiliary/scanner/discovery/ipv6_neighbor_router_advertisement
msf auxiliary(ipv6_neighbor_router_advertisement) > set INTERFACE eth1
msf auxiliary(ipv6_neighbor_router_advertisement) > run

Scanning:

# nmap
nmap -6 -T4 -Pn -open -sS -A -oA ipv6_tcp_fast -iL targets.txt
nmap -6 -T4 -Pn -open -sSVC -A –p0-65535 -oA ipv6_tcp_full -iL targets.txt
nmap -6 -T4 -Pn -open -sY –p0-65535 -oA ipv6_sctp -iL targets.txt
nmap -6 -T3 -Pn -open -sU -oA ipv6_udp -iL targets.txt

# hping 
hping3 --scan known -S 192.185.5.1

Message	ICMP v6 type	Description
Router Solicitation	133	Used by nodes to locate routers on the link
Router Advertisement	134	Used by routers to advertise their presence, along with link and prefix parameters; advertisements are sent periodically by routers, or to hosts when responding to solicitation requests
Neighbor Solicitation	135	Used by nodes to determine the link addresses of IPv6 neighbors, and verify that neighbors are reachable via cached addresses
Neighbor advertisement	136	Used to respond to solicitation messages, providing IPv6 and link address details
Redirect	137