/poisontap-antidote

quick and dirty fix to defend against Poisontap

Primary LanguageShellGNU General Public License v3.0GPL-3.0

Poisontap Antidote

Quick and dirty fix to defend against Poisontap

Linux udev setup to block USB ethernet devices that don't have their MAC addresses listed in a static file.

Solutions for MacOSX and Windows welcome.

Linux Install

install -m 755 -o root match_usb_network_device /usr/local/bin/match_usb_network_device
install -m 644 -o root anti-poisontap.rules /etc/udev/rules.d/zzz_anti-poisontap.rules
install -m 644 -o root usb_network_devices /etc/usb_network_devices

udevadm control --reload

References