Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
vlan-hopping---frogger — Easy 802.1Q VLAN Hopping | Kitploit
Tools/GitHubGitHub/nccgroup/vlan-hopping---frogger
ReconnaissanceNetwork MappingExploitationInformation GatheringNetwork SecurityPenetration TestingRed Teaming
GitHubnccgroup/vlan-hopping---frogger

vlan-hopping---frogger

Easy 802.1Q VLAN Hopping

View Repository
3889810 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Frogger - VLAN Hopping

Simple VLAN enumeration and hopping script.

Released as open source by NCC Group Plc - http://www.nccgroup.com/

Developed by Daniel Compton, daniel dot compton at nccgroup dot com

https://github.com/nccgroup/vlan-hopping

Released under AGPL see LICENSE for more information

Installing

root@kitploit:~
git clone https://github.com/nccgroup/vlan-hopping.git

How To Use

root@kitploit:~
./frogger.sh

Run as root.

Features

  • Sniffs out CDP packets and extracts (VTP domain name, VLAN management address, Native VLAN ID and IOS version of Cisco devices)
  • It will enable a DTP trunk attack automatically
  • Sniffs out and extracts all 802.1Q tagged VLAN packets within STP packets and extracts the unique IDs.
  • Auto arp-scans the discovered VLAN IDs and auto tags packets and scans each VLAN ID for live devices.
  • Auto option to auto create a VLAN interface within the found network to connect to that VLAN.

Requirements

  • Arp-Scan 1.8 (in order to support VLAN tags must be V1.8 - Backtrack ships with V1.6 that does not support VLAN tags) http://www.nta-monitor.com/tools-resources/security-tools/arp-scan
  • Yersina (built into Backtrack)
  • Tshark (buit into Backtrack)
  • Screen (built into Backtrack)
  • Vconfig (built into Backtrack)

Tested on Backtrack 5 and Kali.

  • Notes for VMware. VLAN hopping generally (not just this script) can have issues within VMware if running the VM within Windows with certain Intel drivers. The Intel drivers strip off the tags before it reaches the VM. Either use an external USB ethernet card such as a DLink USB 2.0 DUB-E100 (old model 10/100 not gigabit) or boot into Backtrack nativiely from a USB stick. Intel has published a registry fix, to work on some models: http://www.intel.com/support/network/sb/CS-005897.htm - adding "MonitorMode" 1 to the registry does resolve the issue.

Screen Shot

Screenshot Screenshot

Change Log

  • Version 2.0 - (Coming soon) will support Cisco ISL encapsulation.
  • Version 1.8 - Added VMware detection and Intel NIC detection to assist with common problems within VMware.
  • Version 1.7 - New look, bug fixes and speed improvements.
  • Version 1.5 - Official release.
Download Tool