Is it possible to perform a MITM Attack through a compromised Windows Machine in a internal LAN? How would be the attacker's scenario? How to do this?

  • It looks like you're asking for a "how to hack" tutorial which is outside the scope of this site. Please rephrase your question in a way that we can give a concise and specific answer. – Purefan Feb 20 '17 at 9:49

Of course.

From a meterpreter session you could run post modules that run on the compromised machine.

You could also use port forwarding in the case you want to connect to Remote Desktop and the port itself isn't accessible from the attacker's machine.

Tools like nighthawk can be used to achieve ARP spoofing (MITM).

It all depends on how stealthy you need to be. Note this is a brief overview and I haven't gone into any depth on these items as your question seems very broad. Feel free to ask a new question covering only a specific item, then link back to this as reference.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.