As far as I know - and please correct me if I'm wrong - Cain does not support WiFi cards. So if an attacker wants to perform ARP poisoning without being connected through Ethernet to the (router\switch) s\he must use an Aircrack adapter.

My question is, if the attacker somehow managed to plug his laptop to the router\switch, will s\he be able to use Cain and perform ARP poisoning and\or network sniffing against wireless clients which are connected to the router through WiFi?

  • ARP poisoning requires access to the local network. If you are behind a router, you are no longer on the local network. – schroeder Jul 3 '14 at 17:29
  • I meant an ADSL or WIMAX router . – HSN Jul 3 '14 at 17:39
  • Once you are on the other side of a device (save a switch), you are no longer on the local network. You aren't seeing the MACs of the individual devices, but of the aggregating device. – schroeder Jul 3 '14 at 18:13
  • To be clear: ARP poisoning is an attack against the local switch, nothing else. It's not necessary with a hub and will not work through a router. – Stephane Jul 4 '14 at 8:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.