Hacker News Reader

There are ways to optimize an attack but pure brute force like IPv4 is impossible.

On a local link, if you know the ipv6 address of one machine you can guess others by getting their device ID (MAC address) and then modifying the known address. So you can use neighbor discovery to find the other MAC addresses to craft the IP addresses.

I think you can also take advantage of router advertisement or client solicitations somehow but I’m not familiar with the details (i.e. passive listening on multicast vis a vis broadcast)

Thanks. I'll have to do some googling on that.

There's neighbor discovery.