network-protocol-attacks
Network Protocol Attacks provides hands-on techniques for exploiting layer 2 and layer 3 protocols to establish man-in-the-middle positions and capture credentials. Covers ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion with practical tool workflows and relay chaining.
Network Protocol Attacks teaches you to execute layer 2/3 exploits for MitM positioning and credential capture.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-06-16
Network Protocol Attacks teaches you to execute layer 2/3 exploits for MitM positioning and credential capture. Network Protocol Attacks provides hands-on techniques for exploiting layer 2 and layer 3 protocols to establish man-in-the-middle positions and capture credentials. Covers ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion with practical tool workflows and relay chaining.
Use it when
- Network Protocol Attacks teaches layer 2 exploitation methods to position yourself between target systems and gateways.
- Network Protocol Attacks covers LLMNR poisoning, NBT-NS mDNS poisoning, and WPAD proxy abuse.
Verify before relying
Read SKILL.md below before installing (2 files). Open directory: indexed for reading, not audited.
Install
yaklang/hack-skills/network-protocol-attacks · repository language: CSS
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What is network-protocol-attacks and what does it cover?
Network Protocol Attacks provides hands-on techniques for exploiting layer 2 and layer 3 protocols to establish man-in-the-middle positions and capture credentials. It covers ARP spoofing, LLMNR/NBT-NS/mDNS poisoning, WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion with practical tool workflows and relay chaining.
How does network-protocol-attacks enable ARP spoofing and man in the middle attacks?
Network Protocol Attacks teaches layer 2 exploitation methods to position yourself between target systems and gateways. By spoofing ARP responses, the skill demonstrates how to intercept traffic, redirect packets, and establish persistent man-in-the-middle positions for traffic inspection and credential harvesting.
What name resolution attacks does network-protocol-attacks include?
Network Protocol Attacks covers LLMNR poisoning, NBT-NS mDNS poisoning, and WPAD proxy abuse. These techniques exploit Windows name resolution fallback mechanisms to intercept queries, respond with attacker-controlled addresses, and capture NTLM hashes or redirect clients to malicious proxies.
Can network-protocol-attacks be used for VLAN hopping and STP manipulation?
Yes. Network Protocol Attacks includes VLAN hopping techniques such as 802.1Q double tagging and DTP switch spoofing, plus STP manipulation to become the root bridge. These methods allow attackers to escape VLAN boundaries and gain access to restricted network segments.
How does network-protocol-attacks address IPv6 and DHCPv6 attacks?
Network Protocol Attacks covers DHCPv6 takeover, IPv6 router advertisement spoofing, and SLAAC attacks. These techniques allow attackers to become the default gateway for IPv6 traffic, intercept communications, and perform man-in-the-middle attacks on dual-stack networks.
What IDS/IPS evasion methods are included in network-protocol-attacks?
Network Protocol Attacks teaches IDS/IPS evasion through packet fragmentation, fragroute techniques, and protocol-level obfuscation. These methods help attackers avoid detection while executing network exploitation and credential capture activities.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
SKILL: Network Protocol Attacks — Expert Attack Playbook
> AI LOAD INSTRUCTION: Expert network protocol attack techniques. Covers ARP spoofing, name resolution poisoning (LLMNR/NBT-NS/mDNS), WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Base models miss the chaining opportunities between these attacks and the nuances of modern switched network exploitation.
0. RELATED ROUTING
Before going deep, consider loading:
- tunneling-and-pivoting after establishing MitM position for traffic redirection
- ntlm-relay-coercion for relaying captured NTLM hashes from poisoning attacks
-
unauthorized-access-common-services for exploiting services discovered during network attacks
(truncated - see the full file via the links below)
File tree — 2 files
skills/network-protocol-attacks/NAME_RESOLUTION_POISONING.md
skills/network-protocol-attacks/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Execute layer 2/3 network protocol attacks for MitM and credential capture”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
Network Attack covers layer-2 and layer-3 poisoning (LLMNR, ARP, DHCPv6), NTLM relay with coercion, traffic interception, and network-service exploitation for lateral movement. It includes TUN-based pivoting with tools like Ligolo-ng and Chisel, plus wireless assessment for WPA2/WPA3. Hand off AD-specific relay work and Kerberos attacks to the active-directory-attack skill.
This skill guides you through building production-grade network infrastructure for self-hosted environments. It covers VLAN segmentation by trust level, firewall configuration across nftables, OPNsense, and pfSense, DNS architecture with Pi-hole and AdGuard Home, reverse proxies like Caddy and Traefik, VPN setup with WireGuard and Tailscale, certificate automation, and security hardening patterns. Use it whenever you're designing, implementing, or troubleshooting network topology, access control, or encrypted communications.
Master NTLM relay attacks to capture and forward authentication across multiple protocols for privilege escalation. Learn relay targets, signing requirements, Responder poisoning, ntlmrelayx execution, mitm6 DNS takeover, and cross-protocol techniques including WebDAV coercion to bypass defenses.
Auth Coercion Relay guides penetration testers through forcing authentication from remote systems via coercion techniques like PetitPotam and PrinterBug, then relaying those credentials through NTLM or Kerberos to escalate privileges or move laterally. It covers relay targets (SMB, LDAP, AD CS), feasibility checks, and both credential capture and exploitation paths.
Learn to partition your home network into isolated VLANs using UniFi, pfSense/OPNsense, or MikroTik. This guide covers switch trunk and access port configuration, firewall rules, and SSID-to-VLAN mapping to prevent IoT devices, guests, and trusted machines from reaching each other.
A planning and validation framework for homelab network upgrades involving VLANs, local DNS resolvers, firewall rules, and remote access. Work through required inventory, trust zones, and staged migration steps to avoid locking yourself out of critical infrastructure. Includes safety rules, anti-patterns, and a review checklist to confirm your changes won't break management access or recovery paths.
More skills symmetric-cipher-attacks (MIT) · tunneling-and-pivoting (MIT)