It is generally assumed that sending and sniffing arbitrary, Fast Ethernet packets can be performed with standard Network Interface Cards (NIC) and generally available packet injection software. However, full control of frame values such as the Frame Check Sequence (FCS) or Start-of-Frame delimiter (SFD) has historically required the use of dedicated and costly hardware. This presentation, given at Blackhat 2013, dissects Fast Ethernet layer 1 and 2 presenting novel attack techniques supported by an affordable hardware setup that, using customized firmware, allows fully arbitrary frame injection. Proof of concept code also included.
You can download it from the following link: https://packetstormsecurity.com/files/download/122649/802.3-injection.tgz
Source: https://packetstormsecurity.com/files/122649/Fully-Arbitrary-802.3-Packet-Injection-Maximizing-The-Ethernet-Attack-Surface.html