I was trying to run a Rogue DHCP Server which should cause a MITM attack. I did the following
- Exhaust the real DHCP Server using
DHCPig
(worked) - Run a Rogue DHCP Server using the
auxiliary/server/dhcp
module (runs) - Cause a device to send a DHCP request
I see the incoming request in wireshark but the real DHCP Server which has no more leases is sending a DHCP NACK Packet which causes the client to cancel his request instantly. This results in the client ignoring the DHCP Offer from my Rogue DHCP Server.
I can thihnk of not exhausting the DHCP Server and "just" be faster which did not work out very well when I tried it.
What is the best way to move the client to accept my DHCP offer?