layer2-security

Core smart contracts for LiqWhale: A sophisticated DeFi protocol on Base featuring Shannon's Rebalancing Engine, a 7-asset automated treasury, and hyper-deflationary tokenomics

Layer 2 attack & defense lab in PNetLab: launch ARP poisoning/MITM, DHCP starvation + rogue DHCP, MAC flooding, and a SYN flood DoS from Kali, then stop each with the matching control (DAI, DHCP snooping, port security, ACL/SYN-flood mitigation) — with before/after proof.

This is a MAC flooding attack scenario: the attacker poisons the switch's internal memory by overwhelming it with fake MAC address mappings. As the switch fails open into broadcast mode, the attacker’s NIC (network interface card) now receives traffic not meant for it.

Deep dive into Layer 2 STP BPDU injection attacks, arbitrary Root Bridge takeover scenarios (DoS/MITM), and enterprise mitigation using BPDU Guard and core priority hardening.

Laboratorio de aseguramiento inalámbrico (Capa 2 MAC Filtering) y monitoreo centralizado de dispositivos IoT (Capa 7).

ARP Spoofing is not an isolated event—it is the tactical execution of a mid-stage attacker who has already compromised a host and now seeks to manipulate local traffic routing for stealthy gain.