full-disclosure - Yersinia, a framework for layer 2 attacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050401124758.GA3977@moskovskaya>
Date: Mon Apr  4 13:06:48 2005
From: yersinia at wasahero.org (Yersinia Authors)
Subject: Yersinia, a framework for layer 2 attacks

Hi,
we are pleased to announce the release of Yersinia, a framework for (mainly) layer 2
attacks. The tool has been presented in BlackHat Europe 2005, so if any of you
could attend the conference will know what it is about.

Yersinia implements several attacks for the following protocols: Spanning
Tree (STP), Cisco Discovery (CDP), Dynamic Host Configuration (DHCP), Hot Standby Router (HSRP), Dynamic
Trunking (DTP), 802.1q and VLAN Trunking (VTP), helping the pen-tester in
different tasks, e.g:

- Becoming the root role in the Spanning Tree
- Creating virtual CDP neighbors
- Setting up rogue DHCP Servers
- Becoming the active router in a HSRP scenario
- Enabling trunk 
- Performing ARP spooing over VLAN Hopping
- Adding/deleting VLANs (via VTP)
- more..

It is a multithreaded application with three main modes: command line, network
client and ncurses GUI, allowing multiple users to launch multiple attacks
simultanously.

Besides, you can decode some Cisco propietary protocols like DTP or
VTP!! 

You can download it from http://yersinia.sf.net and send your doubts,
questions, bugs or greetings to yersinia@...ahero.org.

Best regards and happy trails:)

David Barroso Berrueta
Alfredo Andres Omella