Blog

Stories on networks, training and the Internet.

MACabre: giving Layer 2 the attention it deserves

We pour years into hardening Layer 3. We filter prefixes, sign routes, argue about RPKI over coffee. And then someone walks into a meeting room, plugs in a laptop, and the switch happily hands them the keys to the kingdom. Layer 2 is the floor nobody looks at until they trip over it. So I started building MACabre. So what is it? MACabre (yes, MAC + macabre — I’m not sorry) is an open-source Layer 2 auditing suite in Python, with a PySide6 desktop GUI and Scapy doing the dirty work underneath. Point it at your own lab, pick an attack from the menu, and watch how your switches, bridges and access ports hold up. ...

2 November 2026 · 2 min