Plunder Bug
  • Plunder Bug by Hak5
  • Getting Started
    • Tapping an Ethernet link
    • Drivers
  • Active and Passive Modes
    • About Mode Switching
    • Windows Mode Switching
    • MacOS Mode Switching
    • Linux Mode Switching
  • Advanced Usage
    • Using as a Simple Switch
Powered by GitBook
On this page
  1. Getting Started

Tapping an Ethernet link

Getting Started

Last updated 3 years ago

The Plunder Bug by Hak5 is pocket-sized LAN Tap that lets you "bug" Ethernet connections with USB-C convenience.

Using a USB-C cable, connect the Plunder Bug to a computer running a network analyzer such as Wireshark. The light on the Plunder Bug will illuminate green to indicate that it is powered, and you will notice on the computer a new network interface (ASIX AX88772C USB Ethernet).

You will most likely wish to switch the Plunder Bug into passive mode, which mutes the tap port, preventing the host computer from transmitting anything downstream on the tap port. See .

Using two Ethernet cables, plug the Plunder Bug inline between any two devices, such as a PC and a LAN switch. Packets between the two ports will be mirrored on the USB-C tap port, which may be viewed using common open source packet analyzers such as or .

instructions for your operating system here
Wireshark
tcpdump