A penetration testing tool that bypasses wired 802.1x network protection to gain access to target networks.
FENRIR is a penetration testing tool specifically designed to bypass wired 802.1x network protection mechanisms. It enables security professionals to gain unauthorized access to target networks during offensive engagements by tapping authentication protocols and spoofing legitimate network traffic. The tool provides an interactive interface with autoconfiguration capabilities for rapid deployment in security assessments.
Penetration testers, red teamers, and offensive security professionals who need to bypass network access controls during security assessments. Also suitable for security researchers studying 802.1x vulnerabilities and bypass techniques.
FENRIR offers a specialized, out-of-the-box solution for bypassing wired 802.1x protections that many general-purpose penetration testing tools lack. Its modular architecture allows for extensible protocol support, and its autoconfiguration feature enables quick deployment during time-sensitive engagements.
FENRIR is an out-of-the-box tool designed for penetration tests and offensive security engagements. Its primary purpose is to bypass wired 802.1x network access control (NAC) protections, allowing testers to gain unauthorized access to a target network for security assessment.
FENRIR prioritizes practical, out-of-the-box usability for penetration testers, with a focus on bypassing network protections efficiently while maintaining an extensible module-based architecture for future protocol support.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Fully implements wired 802.1x tapping and bypass, a rare and focused feature in penetration testing tools, as highlighted in the key features and philosophy.
Includes an autoconfiguration function that automatically sets network parameters, speeding up deployment during security engagements without manual tweaking.
Provides a command-line interface with autocompletion and shell command execution, enhancing usability and efficiency during runtime operations.
Built with a module-based design allowing for future protocol additions like SSH and SMB, supporting extensibility as per the project's stated plans.
The README admits it's a work in progress with bugs everywhere and code that needs cleaning, making it unreliable for critical or production use.
Requires root access, two network interfaces in promisc mode, specific Python package versions (e.g., cmd2<=0.7.0), and manual configuration steps, adding overhead.
Currently only fully supports IP, ARP, and ICMP; advanced protocols like LLMNR/NBNS are partial, and SSH/SMB are still in development, restricting utility.