wzy318/attacker repository overview

⁠wzy318/attacker:latest

This image is created from kalilinux/kalirolling.

apt install --no-install-recommends vim wget curl iputils-ping iproute2 frr systemctl python3-scapy libpcap-dev

⁠FRR

⁠FRR Usage

After you start the docker container, FRR is not automatically started. You need to manually start it as a service:

systemctl start frr

The basic commands of systemctl include start, stop, restart, status, reload, ...

⁠FRR Config

The image has vim installed. Run vim /etc/frr/frr.conf to edit the config.

⁠FRR Console

When FRR is running, you can enter the console of the "FRR router". This command enter the router console. Inside the console you can run commands like sh running-config, sh ip route, conf t.

vtysh

⁠Attacker

The attacker python code is placed in /usr/bin/double_lsa_attack. The code is copied from https://github.com/lizitong67/OSPF_Attack_and_Detection/blob/master/double_lsa_attack.py⁠ and some comments in it are removed for compatibility.

I also find another python attacker https://github.com/lizitong67/OSPF_Attack_and_Detection/blob/master/double_lsa_attack.py⁠, seems that lizitong's attacker was derived from this one.

⁠Run Attacker

double_lsa_attack

⁠Edit Attacker

vim /usr/bin/double_lsa_attack