ARP poisoning
Whenever any device intends to communicate with another device, the requesting device sends a broadcast to the whole subnet. Then, the device to which the IP address belongs replies with its MAC address using a unicast packet. Through this approach, devices in local area network communicate with each other. A MAC address (physical address) table stores MAC address with its corresponding port number/IP address.
Use the arp -a command to populate the ARP table entries on your machine. The same command on a majority of platforms.
The following are some details pertaining to the local network we will be using for understating:
Device | IP address | MAC address |
Router (default gateway) | 192.168.1.1 | D0:5B:A8:07:73:6C |
Apple (victim) | 192.168.1.103 | D8:BB:2C:B9:53:EC |
Windows server (victim) | 192.168.1.109 | 00:0C:29:B3:CB:B6 |
Kali Linux (attacker) | 192.168.1.106 | 00:0C:29:5D:A7:F7 |
Â
For instance, if the Apple machine wishes to communicate with the Windows machine located at 192.168.1.109, Apple will send a broadcast...
