is a framework for performing layer 2 attacks. The following protocols have been implemented in Yersinia current version: Spanning Tree Protocol (STP), VLAN Trunking Protocol (VTP), Hot Standby Router Protocol (HSRP), Dynamic Trunking Protocol (DTP), IEEE 802.1Q, Cisco Discovery Protocol (CDP), Dynamic Host Configuration Protocol (DHCP) and, finally, the Inter-Switch Link Protocol (ISL).
Some of the attacks implemented will cause a DoS in a network, other will help to perform any other more advanced attack, or both. In addition, some of them will be first released to the public since there isn't any public implementation.
Yersinia will definitely help both pen-testers and network administrators in their daily tasks.
Some of the mentioned attacks are DoS attacks, so TAKE CARE about what you're doing because you can convert your network into an UNSTABLE one.
A lot of examples are given at this page EXAMPLES section, showing a real and useful program execution.
Start a graphical GTK session.
Start an interactive ncurses session.
Start the network listener for remote admin (Cisco CLI emulation).
Enable debug messages.
Save the current session to the file logfile. If logfile exists, the data will be appended at the end.
The following protocols are implemented in yersinia current version:
Spanning Tree Protocol (STP and RSTP)
Cisco Discovery Protocol (CDP)
Hot Standby Router Protocol (HSRP)
Dynamic Host Configuration Protocol (DHCP)
Dynamic Trunking Protocol (DTP)
VLAN Trunking Protocol (VTP)
Inter-Switch Link Protocol (ISL)
Spanning Tree Protocol (STP): is a link management protocol that provides path redundancy while preventing undesirable loops in the network. The supported options are:
BPDU version (0 STP, 2 RSTP, 3 MSTP)
BPDU type (Configuration, TCN)
BPDU root path cost
BPDU Root ID
BPDU Bridge ID
BPDU Port ID
BPDU Message Age
BPDU Max Age (default is 20)
BPDU Hello Time (default is 2)
BPDU Forward Delay
Source MAC address
Destination MAC address
Set network interface to use
Attack to launch
Cisco Discovery Protocol (CDP): is a Cisco propietary Protocol which main aim is to let Cisco devices to communicate to each other about their device settings and protocol configurations. The supported options are:
The GTK GUI (-G) is a GTK graphical interface with all of the yersinia powerful features and a professional 'look and feel'.
The ncurses GUI (-I) is a ncurses (or curses) based console where the user can take advantage of yersinia powerful features.
Press 'h' to display the Help Screen and enjoy your session :)
The Network Daemon (-D) is a telnet based server (ala Cisco mode) that listens by default in port 12000/tcp waiting for incoming telnet connections.
It supports a CLI similar to a Cisco device where the user (once authenticated) can display different settings and can launch attacks without having yersinia running in her own machine (specially useful for Windows users).
- Send a Rapid Spanning-Tree BPDU with port role designated, port state agreement, learning and port id 0x3000 to eth1:
- Start a Spanning-Tree nonDoS root claiming attack in the first nonloopback interface
(keep in mind that this kind of attack will use the first BPDU on the
network interface to fill in the BPDU fields properly):
yersinia stp -attack 4
- Start a Spanning-Tree DoS attack sending TCN BPDUs in the eth0 interface with MAC address
yersinia stp -attack 3 -source 66:66:66:66:66:66
The README file contains more in-depth documentation about the attacks.