A Linux packet crafting tool for generating attack signatures to test IDS/IPS and network security.
Pig is a Linux packet crafting tool that generates network packets with attack signatures for security testing. It helps security professionals and network administrators test intrusion detection and prevention systems (IDS/IPS) by simulating malicious traffic. The tool supports multiple protocols and allows customization of packet signatures to match specific testing requirements.
Network security professionals, penetration testers, and system administrators who need to test IDS/IPS systems or simulate network attacks in controlled environments.
Pig offers a simple, text-based approach to packet crafting with a built-in library of attack signatures, making it accessible for security testing without requiring low-level packet programming. Its support for raw Ethernet frames and geographic IP targeting provides flexibility for advanced network simulations.
A Linux packet crafting tool.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Includes a collection of well-known attack signatures in pigsty files, such as ddos.pigsty and backdoors.pigsty, ready for immediate use in security testing without custom coding.
Supports IPv4 with TCP, UDP, ICMP, ARP, and raw Ethernet frame construction, allowing customization from layer 2 up for diverse testing scenarios.
Enables specification of IP addresses by region (e.g., north-american-ip) in pigsty files, useful for simulating realistic attack sources in testing.
Uses plain-text pigsty files with a straightforward field-based syntax, making it accessible for users without deep low-level networking knowledge.
Includes an interactive shell mode and sub-tasks like pcap-import for importing packets from PCAP files, enhancing workflow flexibility.
Only supports IPv4 natively; IPv6 requires manual raw Ethernet frame construction, which is complex and error-prone, as admitted in the README.
Requires Hefesto for building and installation, adding setup complexity compared to standard package managers or build tools like make.
Documentation is fragmented across multiple files (e.g., BUILD.md, manual sub-task docs), and as a niche tool, it lacks extensive community support or tutorials.
Lacks a graphical user interface, making it less accessible for users who prefer visual tools for packet crafting and debugging.