A framework for performing and analyzing layer 2 network protocol attacks, including STP and CDP.
Yersinia is a network security framework focused on layer 2 protocol attacks and analysis. It provides tools for testing vulnerabilities in network switching protocols like Spanning Tree Protocol (STP) and Cisco Discovery Protocol (CDP), helping security professionals identify weaknesses in network infrastructure. The framework includes detailed implementations of various attack vectors with real-world examples and mitigation strategies.
Network security professionals, penetration testers, and network administrators who need to assess and harden layer 2 network security. It's particularly valuable for those working with Cisco networking equipment and enterprise network environments.
Yersinia offers specialized, protocol-specific attack implementations that go beyond generic network testing tools. Its detailed documentation, real device log outputs, and practical mitigation guidance make it uniquely valuable for understanding and defending against layer 2 vulnerabilities in production networks.
A framework for layer 2 attacks
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Implements multiple STP attacks including DoS via BPDU flooding, root hijacking, and infinite elections, with detailed packet structures and real Cisco log outputs shown in the README.
Provides specific Cisco configuration recommendations like enabling BPDU guard and root guard, directly tied to attack examples for effective network hardening.
Includes references to academic papers and technical resources, such as Guillermo Marro's Master Thesis, deepening understanding of protocol vulnerabilities.
Offers hands-on implementations with actual device log outputs, making it valuable for practical penetration testing and vulnerability assessment.
Focuses primarily on STP and CDP, missing other layer 2 protocols like LLDP or VTP, which restricts comprehensive network testing.
Mitigation advice and attack examples are heavily tailored to Cisco devices, reducing utility in mixed-vendor or non-Cisco environments.
The README contains old links and lacks modern updates, such as dated Cisco URLs, which might affect usability with current network equipment.