Questions tagged [arp]
The arp tag has no usage guidance.
1
vote
2answers
60 views
Why can't iptables drop arp requests
I was trying to hide my laptop from my phone's network scan app. The app is using arp requests to find devices on the network. I tried everything on iptables. It doesn't work, even if i set all the ...
0
votes
1answer
50 views
ARP poisoning NAC
I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning.
As seen here Bypassing Trustwave NAC, it looks like a good method, but I don't simply get it. With ARP ...
1
vote
1answer
188 views
ARP request replay attack - why do APs work the way they do?
ARP request replay attacks are based on the practice that wireless access points repeat ARP packets injected into the network, and since these ARP packets are encrypted, they also carry the IV with it....
0
votes
0answers
34 views
Does having a static ARP with a client offline cause a mac spoofing risk?
If you have all the IPs and MACs specified in /etc/ethers and one of the cilents specified goes offline, does that cause a risk that someone could spoof a mac address?
3
votes
1answer
202 views
How ARP spoofing works when the attacker has a different IP address than target?
I am unable to understand fully how ARP spoofing attacks are successful.
Assuming three PCs are connected to a single switch
PC-1 - IP address 192.168.1.1, MAC: AA:AA:AA:AA:AA:AA
PC-2 - IP address ...
0
votes
0answers
193 views
What are all of these IPs addresses? Honeypots?
I was scanning my network (192.168.0.1-100) and I found many IP addresses that are not mine nor known, around 800 of them. I guess it has something to do with the ISP. After scanning the ips with nmap ...
1
vote
0answers
99 views
ARP poisoning command slows down victim internet and victim has no access
im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is
echo -1 > /proc/sys/met/ipv4/ip_forward
iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
2
votes
2answers
146 views
Does ARP spoofing works in case the target ARP cache has the gateway
I am trying to create a script that will do a basic ARP spoofing attack (I choose this StackExchange website because the question is more about the theoretical side), and I see no reference to the ...
1
vote
2answers
405 views
Ettercap man in the middle - ARP poison
I am experimenting a bit with Ettercap in my local Wifi Lan.
I have a router (R), my pc (P) with Ettercap running on it and my smarthphone (S).
In particular am testing the ARP poison MIM attack and ...
3
votes
1answer
1k views
Problem with ARP-Spoofing
first of all i have a basic questions regarding network traffic:
All Devices in the network are connected with WLAN and a Router. If i send a message from my computer to a other device in the network ...
2
votes
3answers
293 views
ARP request spoofing
I'm working on an SDN-based access/backhaul network. For some experiments I need to generate an ARP request from one of the node in my network, pretending to be another one. Essentially this ARP ...
2
votes
2answers
2k views
Best practice to discover network hosts?
I'm creating a python networking program and need to discover all the usable hosts on the network such as phones and desktops on Linux.
What works better, NMAP, Arp-Scan, arp, or something else?
I've ...
1
vote
1answer
394 views
Can't see ARP poisoning packets on Wireshark and Scapy
I'm trying to create a python script to detect ARP poisoning on WiFi networks. I'm using scapy and wireshark to check scapy's output. I'm stuck trying to see all ARP traffic on the network, I can only ...
0
votes
1answer
90 views
Why arp returns initial state after arpspoof stopped?
I'm wondering why ARP table in my laptop returns to its initial state when arpspoof tool attack is stoppped.
Is there any option for the attacker to modify the victims ARP table until the default ...
0
votes
0answers
349 views
Is it possible to perform ARP/DNS poisoning throught meterpreter?
I am looking for a technique to perform ARP poisoning and DNS poisoning attacks through a meterpreter session of a victim but without success. The victim has Windows OS running and everything should ...
3
votes
2answers
2k views
What is the role of ARP poisoning when doing a DHCP spoofing attack
My Current Background on the topic
DHCP Spoofing is done by a rogue DHCP server on the network which replies to DHCP requests from hosts(Attacker can run a DHCP starvation attack on the legitimate ...
1
vote
1answer
968 views
Is it possible to Spoof Another Machine's MAC Address on LAN?
Is it possible to Spoof Another Machine's MAC Address on LAN?
I know we can spoof mac address of machine that we are currently on, using macchanger or ifconfig wlan0 ether de:ad:be:ef:ca:fe. But I ...
0
votes
1answer
251 views
How to test DoS attack by sending unsolicited ARP packets over ethernet?
I want to test a system for DoS attack using ARP packets as the system only responds to ARP packets and left all ports are closed.
Can nmap or arping help in this case?
3
votes
3answers
576 views
Force a device to give up its IP address?
Expanding to a previous question where I asked if it would be possible to redirect traffic on a port from another device to my local device, if a PC on my network (device A) has the IP address 192.168....
0
votes
0answers
269 views
MITM attack through ARP spoofing only works at first
I have a Nintendo Wii in my LAN that connects online through my router. I wrote a quick and dirty script to send ARP packets to the network every two seconds so that the Wii talks to my computer, ...
2
votes
0answers
131 views
How is ARP-spoofing of a Modular CMTS online connection via coaxial broadband even possible?
as one can see on the following screen photos / screenshots, I'm permanently getting ARP-spoofed:
My router's MAC adress should be "90:5C:44:E2:8D:24", as can be seen on the screenshot of my router's ...
1
vote
0answers
269 views
Why computer answers an Arp Request made by Itself
I am studying about arp, and I want to know more about how it works. Right now, I am using Wireshark and this function that returns the mac address from a given ip address ipAddress:
...
-1
votes
0answers
32 views
ARP Spoof With ACL that not allow IP-conectivity between Machines
I have a network and we have configured it with the same ACL's routers that do not allow connectivity between IP's, blocking layer 2 between machines (except the gateway).
With this method, will ARP ...
2
votes
0answers
262 views
Arp Spoofing detection with Ruby [closed]
I am planning to develop a Ruby script that detects ARP spoofing attacks on a local network, I have a few questions about it. There are three scenarios I am taking into consideration:
First idea as ...
3
votes
1answer
298 views
ARP poisoning attack consequences
For testing purposes, I want to apply promiscuous mode in Wireshark to capture traffic not sent to me.
For this, I believe there is the need to poison the ARP table in the switch so that the attacker ...
