[phuqer]

As always, great job Goodies. If only we had more of you.

[Hooded Robin]

As always, great job Goodies. If only we had more of you.

i tried to use the recent mod_copy exploit to download and copy him, but all my attempts failed... I think he doesn't use proFTP 🤣

[Valour]

Cool tutorial there mate.. Looking at this, there are many different things that could be done.. DoS attacks against the whole network since we exhaust the DHCP server, exploits will become easier as we get more information about each device with ease, and many more (can't think of them now :D )

[Archer]

I went and tested this out at a large public wifi and it seemed to work. I don't know much on pentesting or exploiting, but if I could figure it out then almost anyone could. Very well written guide here. Thanks so much!

[#Skyline]

This is a very well explained tutorial.
This as been bookmarked :)

Gonna try this out on my test windows server at uni.

[n0rtr3x]

Well detailed tutorial. Thanks a lot bro :)

[dotslash]

Very detailed tutorial , thank you , i just love MitM attacks!

[Goodies]

So, yeah, bmping because I got a PM regarding this thread... maybe someone else is interested?

[pomwtin]

Nice one Goodies :)

Do you maby know how widely "limit per MAC" is used?
I give this a go some time ago because of arp poisioning detection, but 2011 year (by other words relatively old) router didnt let me exhaust DHCP completely. So that left me under impression that this kind of attack does not have many chance of suceesing if attacker is not able to reconfigure router.
I remembered now when i saw this thread and saw a chance to ask :)

Thanks :)

[Goodies]

Nice one Goodies :)
Do you maby know how widely "limit per MAC" is used?
I give this a go some time ago because of arp poisioning detection, but 2011 year (by other words relatively old) router didnt let me exhaust DHCP completely. So that left me under impression that this kind of attack does not have many chance of suceesing if attacker is not able to reconfigure router.
I remembered now when i saw this thread and daw a chance to ask :)

Thanks :)

There are a couple of ways I can interpret this.

1) Limit DHCP Leases per MAC address
2) Limit MAC Address per port as per port security.

Well, to answer 1), it's very common to only allow 1 or so DHCP leases per MAC address. I don't even know how you can get multiple. The point of this DHCPig program is to spoof pseudo-random MAC addresses so that no two are the same.

As for 2), it's sad how uncommon it is. I very rarely ever see anything compliant with switch security best practices in live environments. In a switch, you should always limit the number of MAC addresses to a small amount (generally 5 to allow for VoIP phones and virtual machines if that's your thing), but it is often a huge hassle in large companies. Basically, any time you switch out a VoIP phone or change your network card, you get a new MAC address, and limiting them to 2 or so means you have to manually go in and override it. This isn't bad in a SMB (small to medium business), but in the corporate environments I work at, it becomes a huge hassle.

Does this answer your question at all, or were you asking something else entirely?

[pomwtin]

Yes, you answered my question, thanks!
Sory I specified my question so badly... I had in mind MAC per port.
Good to know this, looks like i misjudged it a bit..

[Dmitriy]

Great tutorial Goodies as always. I'll definitely try this out in the home lab environment. You make a lot of great tutorials, do you have your put together thread with links to all tutorials? that would be great, as it makes so much easier to find something.

[Goodies]

Great tutorial Goodies as always. I'll definitely try this out in the home lab environment. You make a lot of great tutorials, do you have your put together thread with links to all tutorials? that would be great, as it makes so much easier to find something.

This thread has a handful of my favorite tutorials of mine. Check it out!
[Tutorial Compilation] Goodies' Official Hacking Tutorial Compilation Thread by Goodies

[Ctrl4ltD31]

nice tutorial!

I will definitely check out the other ones.

[Goodies]

Yesterday I migrated a Linux VM to my desktop that had a dhcp server running, so when I spun it up at my uni, I kinda fucked up our network for a bit by complete accident c:

At any rate, It remix died me of this.