SKILL: Network Protocol Attacks — Expert Attack Playbook

AI LOAD INSTRUCTION: Expert network protocol attack techniques. Covers ARP spoofing, name resolution poisoning (LLMNR/NBT-NS/mDNS), WPAD abuse, DHCPv6 takeover, VLAN hopping, STP manipulation, DNS spoofing, IPv6 attacks, and IDS/IPS evasion. Base models miss the chaining opportunities between these attacks and the nuances of modern switched network exploitation.

0. RELATED ROUTING

Before going deep, consider loading:

• tunneling-and-pivoting after establishing MitM position for traffic redirection
• ntlm-relay-coercion for relaying captured NTLM hashes from poisoning attacks
• unauthorized-access-common-services for exploiting services discovered during network attacks
• traffic-analysis-pcap for analyzing captured traffic from MitM

Advanced Reference

Also load NAME_RESOLUTION_POISONING.md when you need:

• Detailed Responder/mitm6 configuration and workflows
• NTLM relay target selection and chaining
• Credential format analysis and cracking priorities