I'm attempting an MTIM attack on my home LAN just for fun. I am using arpspoof which comes pre-installed with the Linux distribution I'm using. The problem I'm having is I can see the server to client traffic, but not client to server traffic.
These are the IP Addresses in use:
- Attacker: 192.168.0.4
- Victim (my phone): 192.168.0.2
- Gateway: 192.168.0.1
Here are the commands I use for the MitM attack:
Enabling IP-Forwarded in my attacking machine by using this command:
echo 1 > /proc/sys/net/ipv4/ip_forward
Now I use an arpspoof command to tell the computers I'm the gateway:
arpsoof -i eth0 -t victimip gatewayip arpspoof -i eth0 -t gatewayip victimip
Then I start Wireshark, which is where I'm unable to see client-to-server traffic.
Am I missing a step?