After practicing arpspoofing on myself my internet connection in unbearably slow on most, but not all of my devices. I have shut everything down and booted back up in an effort to re-arp everything but still run into the same problems.

Here is the scenario: Attacker: Kali linux running on my raspberry pi Victim: My Macbook pro running mac OS

I used the commands in this order: 1.) echo 1 > /proc/sys/net/ipv4/ip_forward 2.) cat /proc/sys/net/ipv4/ip_forward (verified = 1) 3.) arpspoof -i wlan0 -t 192.168.1.5 192.168.1.1 4.) arpspoof -i wlan0 -t 192.168.1.1 192.168.1.5

After troubleshooting and finding a page on here that said I should add the IPTABLES I tried swapping steps 3 and 4 with:

3.) arpspoof -i wlan0 -t 192.168.1.5 -r 192.168.1.1 4.) arpspoof -i wlan0 -t 192.168.1.1 192.168.1.5

Still, nothing has completely alleviated the problem. Any help to a student of infosec would be very greatly appreciated!

New contributor
Valentine-One is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • Did you flush the arp-cache on your still slow boxes manually? Maybe they persist a reboot depending on whatever OS you are using. – Ben Sep 14 at 5:42
  • From your question it's unclear whether you're experimenting this while spoofing or afterwards. – Nico Sep 14 at 12:15
  • Ah yes, to clarify this is after I’ve ctrl+C bith terminals and have re-arped. Thats when I experience the slow connection. Maybe an arp-flush is the answer, I havent tried that – Valentine-One Sep 15 at 6:09

It appears it was indeed a matter of flushing the arp-cache since after I chained these commands my connection appears to be working at normal speed.

arp -n  (to view arp cache)                 **followed by **
Ip -s -s neigh flush all  (to clear the arp cache) **followed by**
arp -n (to verify changes have been made)
New contributor
Valentine-One is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • can you explain what these commands are? – schroeder Sep 15 at 20:24
  • Certainly. arp -n will allow you to view the arp cache, ip -s -s neigh flush all will clear the arp cache, and arp -n again for verification. – Valentine-One 2 days ago
  • Please edit your question to include these things – schroeder 2 days ago

Your Answer

Valentine-One is a new contributor. Be nice, and check out our Code of Conduct.
 
discard

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.