https://cybertoolchain.io/tools/above New releases and features in above, tracked by The Cyber Toolchain. en Thu, 27 Mar 2025 22:33:24 GMT https://github.com/caster0x00/Above/releases/tag/v2.8 https://github.com/caster0x00/Above/releases/tag/v2.8 Thu, 27 Mar 2025 22:33:24 GMT Above v2.8 adds HSRPv2 detection, VRRPv2 plaintext password decoding, and MAC vendor identification. • Adds HSRPv2 protocol support for detecting first-hop redundancy attacks. • Adds decoding of plaintext passwords found in VRRPv2 packets. • Adds vendor detection by MAC address to aid device fingerprinting during network reconnaissance. Breaking changes: • RADIUS protocol support has been removed; setups relying on Above to detect RADIUS traffic will no longer capture it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above https://github.com/caster0x00/Above/releases/tag/v2.7 https://github.com/caster0x00/Above/releases/tag/v2.7 Fri, 23 Aug 2024 04:32:15 GMT Above v2.7 adds SNMP and RADIUS protocol detection to its network threat-visibility toolkit. • Adds SNMP and RADIUS protocol support for network threat detection. • Separates VLAN search into a dedicated function for improved modularity. • Rewrites host discovery via Passive ARP for enhanced reliability. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above https://github.com/caster0x00/Above/releases/tag/v2.5 https://github.com/caster0x00/Above/releases/tag/v2.5 Thu, 07 Mar 2024 15:25:46 GMT Above v2.5 adds support for EAPOL, ARP, IGMP, DHCP, and ICMPv6 protocols • Adds new parsing capabilities for EAPOL, ARP, IGMP, DHCP, and ICMPv6 protocols. • Introduces a new visual output mode for displaying captured packets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above https://github.com/caster0x00/Above/releases/tag/v2.3 https://github.com/caster0x00/Above/releases/tag/v2.3 Sun, 28 Jan 2024 19:09:37 GMT Above v2.3 adds protocol support for SSDP, VRRP v2/v3, LLDP, MNDP, and DTP plus mitigation display. • Adds `SSDP`, `VRRP` (v2 & v3), `LLDP`, `MNDP`, and `DTP` protocol support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above https://github.com/caster0x00/Above/releases/tag/vettel https://github.com/caster0x00/Above/releases/tag/vettel Mon, 04 Dec 2023 00:34:59 GMT Adds `--record-pcap` and `--analyze-pcap` flags for traffic recording and analysis. • Adds `--record-pcap` flag to record live traffic directly into a `.pcap` file. • Adds `--analyze-pcap <path>` flag to analyze previously recorded `.pcap` files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above https://github.com/caster0x00/Above/releases/tag/vivid https://github.com/caster0x00/Above/releases/tag/vivid Thu, 30 Nov 2023 15:41:01 GMT Above 'vivid' adds Simultaneous Multi-Protocol Analysis and 802.1Q Tag Search • `protocol` search now targets all 12 supported network protocols simultaneously instead of one at a time, enabling unified detection across the full protocol stack. • New `802.1q_tag` argument allows searching specifically for 802.1Q tags to detect segmentation security issues on VLANs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/above