vlan-hopping

A module for emulating networks using python objects

Enhanced Frogger for VLAN Hopping

Six Layer 2 attacks (ARP, DHCP, CAM, VLAN, STP) with the switch configuration that stops each one and the capture that proves it

This case study examines VLAN hopping—a network segmentation bypass technique where an attacker crafts specially tagged Ethernet frames to escape their assigned VLAN and access restricted segments. The attack exploits trust assumptions in Layer 2 switch configurations, especially mismanaged trunk ports and native VLAN behaviors.

Prueba de concepto de VLAN Hopping explotando la negociación dinámica de puertos (DTP) para saltar la segmentación de red y acceder a zonas de tráfico restringidas.

Multiple attacks over ISO/OSI layer 2 level

Here is a Proof-of-Concept (PoC) in Python using Scapy to simulate a VLAN Hopping Double Tagging attack. This script creates and sends an Ethernet packet with double 802.1Q tagging, where the first tag (Outer VLAN 10) is stripped by a vulnerable switch, allowing the packet to reach an unauthorized VLAN (Inner VLAN 20).