Network Protocol Attacks

This is a comprehensive playbook for exploiting layer 2 and 3 network protocols during penetration tests. It covers the full spectrum from ARP spoofing and LLMNR/NBT-NS poisoning with Responder to more advanced techniques like VLAN hopping via DTP attacks, DHCPv6 takeover with mitm6, and STP manipulation. The skill shines in showing how these attacks chain together, like using mitm6 to force WPAD lookups that capture NTLM hashes you can relay to LDAP for resource-based constrained delegation. It includes detection indicators and mitigation advice alongside each attack, which is honest and practical. The IDS evasion section and IPv6 attack vectors are solid additions that often get overlooked. If you're doing internal network assessments on anything beyond basic WiFi tests, you'll reference this.