skilly. Buy ad slot
All skills
Community / AGENT SKILL

vlan-hopping-attacks

ShulkwiSEC/bb-huge
0 installs 22 GitHub stars
0

Execute VLAN Hopping attacks to bypass Layer 2 network segmentation constraints. Exploit misconfigured switch ports utilizing Switch Spoofing natively via Dynamic Trunking Protocol (DTP) and specifically Double Tagging (802.1Q) inherently to unconditionally access isolated networks natively.

BEFORE YOU INSTALL

Understand the trade-offs.

SECURITY REVIEW

Not yet assessed

Review the original instructions and requested permissions before installing.

No security review is available for this catalog entry yet.

SKILL QUALITY

Not yet assessed

How clearly the skill guides your agent, how complete its workflow is, and how you can check the outcome.

No quality assessment is available for this catalog entry yet.

The full skill.

Original instructions from the publisher’s SKILL.md

# VLAN Hopping Attacks

## When to Use
- When conducting Internal Network Penetration Testing to comprehensively validate precisely if explicitly implemented VLAN segmentation restricts intrinsically network traffic To access sensitive segmented specifically networks (e.g., Workflow

### Phase 1: Understanding VLAN Hopping (The Concepts)

```text
# Concept: Virtual Local Area Networks (VLANs) isolate network traffic Attack ```

### Phase 2: Switch Spoofing (Dynamic Trunking Protocol)

```bash
# Concept: Cisco 1. Start specifically Yersinia GUI yersinia -G

# 2. Select ```

### Phase 3: Double Tagging (The 802.1Q Exploit)

```text
# Concept: If 1. Packet ```

### Phase 4: Validating the Hop

```bash
# Concept: Validate ```

#### Decision Point πŸ”€
```mermaid
flowchart TD
    A[Locate Target Switch Port ] --> B[Test DTP Negotiation ]
    B --> C{Switch accepts ```


## Prerequisites
- Network access to the target subnet (VPN, pivot, or direct connection)
- Nmap and relevant network scanning tools installed
- Understanding of TCP/IP, common protocols, and network segmentation
- Root/admin access on the attack machine for raw socket operations

## πŸ”΅ Blue Team Detection & Defense
- **Explicit Access Ports**: The **VLAN Pruning and Security**: The Key Concepts
| Concept | Description |
|---------|-------------|
| DTP | Dynamic Trunking Protocol |
| 802.1Q | The |
## Output Format
```
Red Team Execution Protocol: VLAN Security Evasion
==================================================
Target Infrastructure: `Access Switch 04`
Vulnerability: Dynamic Trunking Protocol (DTP) Enabled
Severity: High (CVSS 7.2)

Description:
During Action :
```bash
yersinia dtp -attack 1 -interface eth1
```

Impact :
The ```

## πŸ›‘οΈ Remediation & Mitigation Strategy
- **Input Validation:** Sanitize and strictly type-check all inputs.
- **Least Privilege:** Constrain component execution bounds.


## πŸ“š Shared Resources
> For cross-cutting methodology applicable to all vulnerability classes, see:
> - [`_shared/references/elite-chaining-strategy.md`](../_shared/references/elite-chaining-strategy.md) β€” Exploit chaining methodology and high-payout chain patterns
> - [`_shared/references/elite-report-writing.md`](../_shared/references/elite-report-writing.md) β€” HackerOne-optimized report writing, CWE quick reference
> - [`_shared/references/real-world-bounties.md`](../_shared/references/real-world-bounties.md) β€” Verified disclosed bounties by vulnerability class

## References
- Cisco: [VLAN Security White Paper](https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/10558-21.html)
- Yersinia Project: [Yersinia Network Tool](https://github.com/tomac/yersinia)
- SANS: [VLAN Hopping Explained](https://www.sans.org/white-papers/1149/)