Punching Bag local testbed shows six IPv6 target generation algorithms differ on scan budgets, aliased-prefix recognition, and response-rate adaptation
The authors present and release the IPv6 Punching Bag, a single-machine, low-memory local environment that answers ICMPv6 echo requests with per-prefix configurable response rates and address types, and use it to evaluate six dynamic target generation algorithms (6Hit, 6Sense, 6Scan, 6Tree, AddrMiner-S, and DET), finding that they only partially adhere to scanning budgets while generally respecting rate limits, that all but 6Sense fail to recognize aliased prefixes, and that 6Scan does not adapt to differing response behavior within prefixes.