Hack Forums
Arp Spoofing a computer on my network just ends up DOSING it - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Arp Spoofing a computer on my network just ends up DOSING it (/showthread.php?tid=5748400)



Arp Spoofing a computer on my network just ends up DOSING it - ernestmiller - Nov 5, 2017

So i thought I would have a little play around arp spoofing on my LAN targeted my Desktop PC next to me

Forwarded my ip with echo 1 > /proc/sys/net/ipv4/ip_forward as standard

arpspoof -i wlan0 -t 192.168.1.xx 192.168.1.xxx   target and then router

arpspoof -i wlan0 -t 192.168.1.xxx 192.168.1.xx router and target in a seperate terminal so both are running

driftnet -i wlan0

urlsnarf -i wlan0

I also have Bettercap running in sniffer mode on the LAN, I then use my computer to look up some stuff, both driftnet and urlsnarf detect nothing

but Bettercap not straight away but does eventually show the traffic, though most of the time this has not happened and the internet on the computer I am targetting
just straight up refuses to work until i quit out of the arpspoofing.


RE: Arp Spoofing a computer on my network just ends up DOSING it - NothingIllegal - Nov 5, 2017

I don't think you need the second arpspoof command...? I've successfully arpspoofed with only your ip forwarding command and your first arpspoof command... but now that I'm thinking about it, I could be completely wrong.


RE: Arp Spoofing a computer on my network just ends up DOSING it - ernestmiller - Nov 6, 2017

I thought you had to spoof both ways pretend to be the target to the router and then be the router to the target in a two way communication


RE: Arp Spoofing a computer on my network just ends up DOSING it - Mr. Kim - Nov 6, 2017

Are you actually routing the packets to their destination? Or are you just intercepting them?


RE: Arp Spoofing a computer on my network just ends up DOSING it - ernestmiller - Nov 6, 2017

I was trying to Intercept them on my Kali laptop with Wireshark


RE: Arp Spoofing a computer on my network just ends up DOSING it - Mr. Kim - Nov 6, 2017

(Nov 6, 2017 08:02 AM)ernestmiller Wrote:  I was trying to Intercept them on my Kali laptop with Wireshark

Right, but are you forwarding them to their destination?


RE: Arp Spoofing a computer on my network just ends up DOSING it - NothingIllegal - Nov 6, 2017

I think you're missing the 2nd step on this page: https://github.com/moxie0/sslstrip
Code
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port <yourListenPort>