(Dec 22, 2019 10:35 AM)Iaintarobot Wrote:  Hi, I'm currently learning about MITM attack.

When I'm doing the arpspoof part, it's seem to work, but when the victim (My other computer) try to connect to a web site, it doesn't work, it does like a Dos attack, so in other words, it can't connect to anything, as if my computer wasn't connect to the internet.

I tried ettercap, doing the right things, but nothing is working.
I also tried arpspoof with the "arpspoof -i [interface] [ap IP] [victim IP]" command, it's seem to work, but again, my victim's computer can't connect to any website.

I did too the IP forwarding with the following command "echo 1 > /proc/sys/net/ipv4/ip_forward"
Also, when I do "arp -a" on my victim computer (A windows 10 machine), I can see that the MAC adress of the IP adress for the gateway (Ex.: 192.168.0.1) as changed for my hacker's computer's MAC adress in place of the true MAC adress of the router, so actually, the spoofing is working well, because the victim's computer that my hacker's computer is now the router, but the victim can't connect to any website.

I also tried to connect to a web site using the IP adress of it, to see if that was only the DNS server that wasn't working, but either with the IP adress, it doesn't work.

Thanks for your help  😁

(Sorry for my bad english)

(Dec 22, 2019 11:20 AM)SysAdmin Wrote:  ARP Spoofing will not work if the site uses HSTS, you'd need to strip the HTTPS connection first, otherwise the connection will get refused until HTTPS is re-established.