Hack Forums
[Cryptix] Arp-Detector : Detect ARP Spoof attacks - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [Cryptix] Arp-Detector : Detect ARP Spoof attacks (/showthread.php?tid=5565395)



[Cryptix] Arp-Detector : Detect ARP Spoof attacks - MR - X - Mar 3, 2017

This is a application I made to help detect ARP Spoofing attacks within the local network.

When the applications first opens it gets your gateway IP and looks up its MAC address.

It then runs on a continued timer to check if this router/modems mac address is changed to direct to a new MAC.

If the application detects that the original MAC of gateway doesn't match current gateway MAC it alerts user of attack.


[Image: arpblock.png]


Virus Scan -
https://www.virustotal.com/en/file/e9939a1e2e3479fd756702c53a5b302ee4ce357f1760571cf0e4562bd4d8c7a9/analysis/1488558353/

Download -
http://cryptixchat.loseyourip.com/arp/Arp-Detector.zip


* - RastaManKing - Mar 3, 2017

nice little and simple tool, wouldn't hurt to leave it running while on hotspots.. thank you!


* - MR - X - Mar 3, 2017

(Mar 3, 2017 09:04 PM)RastaManKing Wrote:  nice little and simple tool, wouldn't hurt to leave it running while on hotspots.. thank you!

np mate, Thanks for noticing the usefulness of it should work fine for most ARP detection.


* - Visual Freedom - Mar 4, 2017

Link is already down. Please fix it!


* - .Cherry - Mar 4, 2017

What windows version are you on?


* - MR - X - Mar 4, 2017

(Mar 4, 2017 01:39 PM).Cherry Wrote:  What windows version are you on?

Windows XP on wine and VM linux core OS


(Mar 4, 2017 01:38 PM)Visual Freedom Wrote:  Link is already down. Please fix it!

Sorry server was having some issues while I was hosting another server. Should be all good now.


* - Korvo - Mar 4, 2017

Looks really neat man. Going to have to check this out. Best of luck with the dev on it!


* - PalpaT - Mar 5, 2017

Do you have a Linux version, or equivalent tool ?


* - MR - X - Mar 5, 2017

(Mar 5, 2017 12:27 PM)PalpaT Wrote:  Do you have a Linux version, or equivalent tool ?

This wont work for linux by default and wine will prob give issues if you use a VM like virtualbox and run it on there it should work just have it set so the VM uses your nic.

Or you could use somthing like arpwatch or arp -a
Code
sudo arp -a

Create a shell script that loops through the arp -a command