ARP poisoning

Whenever any device intends to communicate with another device, the requesting device sends a broadcast to the whole subnet. Then, the device to which the IP address belongs replies with its MAC address using a unicast packet. Through this approach, devices in local area network communicate with each other. A MAC address (physical address) table stores MAC address with its corresponding port number/IP address.

Use the arp -a command to populate the ARP table entries on your machine. The same command on a majority of platforms.

The following are some details pertaining to the local network we will be using for understating:

Device	IP address	MAC address
Router (default gateway)	192.168.1.1	D0:5B:A8:07:73:6C
Apple (victim)	192.168.1.103	D8:BB:2C:B9:53:EC
Windows server (victim)	192.168.1.109	00:0C:29:B3:CB:B6
Kali Linux (attacker)	192.168.1.106	00:0C:29:5D:A7:F7

 

For instance, if the Apple machine wishes to communicate with the Windows machine located at 192.168.1.109, Apple will send a broadcast...