{"repo":"scipag/nac_bypass","free":true,"listed":false,"github":"https://github.com/scipag/nac_bypass","clone":"git clone https://github.com/scipag/nac_bypass.git","description":"Script collection to bypass Network Access Control (NAC, 802.1x)","language":"Shell","stars":381,"topics":["bash","nac","bypass","redteam","pentest","network"],"license":"MIT","category":"cli-tools","readme_excerpt":"bypass/nac bypass Requirements The basic requirement for an NAC bypass is access to a device that has already been authenticated. This device is used to log into the network and then smuggle in network packages from a different device. This involves placing the attacker’s system between the network switch and the authenticated device. One way to do this is with a Raspberry Pi and two network adapters. Installation The NACkered script and our nac bypass setup.sh solution were written and tested on Debian-based Linux distributions, but both should be executable on other Linux distributions as well. The following software packages are required: 1. Install tools, on Debian-like distros: bridge-utils ethtool macchanger arptables ebtables iptables net-tools tcpdump 2. Load kernel module: modprobe br netfilter 3. Persist kernel module: br netfilter into /etc/modules For arptables, iptables and ebtables, make sure not to use Netfilter xtable tools (nft), or the script will not work as desired. The nac bypass setup.sh script has the following parameters: The parameters -1 and -2 define which network adapters will be used. You can also edit them directly in the script: -a suppresses the output of the script’s log and debugging information and no manual interaction is required when running it. The parameters -R and -S activate port forwarding for the use of SSH and Responder. The parameters -c , -i and -r only initiate certain sequences within the script. Use The legitimate device, clie","default_branch":null,"files":null,"tree":[],"storefront":"/r/scipag","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/scipag/nac_bypass/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}