[MR - X]

ArpSploit - Exploit Local Network


ArpSploit is a program I created that allows you to easily with a single button click exploit your network. It works by automaticly obtaining the gateway IP of your current connection. It then does a quick scan to detect other devices alive on the network. It then automaticly continues to arp posion the network telling all devices on the network to direct traffic to your device.

As the arp spoof attack starts the program is set to capture login data/messenger data & download data. And stores all this into a pcap file. The program is also set to automaticly dump the pcap data into readable text which can be switched on or off at anytime.


You can also save the pcap file of your capture attack and then analyze with other software if you wish to have more than just readable text, somthing like networkminer for example.

https://sourceforge.net/projects/networkminer/




I do not advice to use this program in wine - If on linux use VM as wine cant support the built in winsock data.


AV Scan -
https://www.virustotal.com/en/file/354bc.../analysis/


Download -
http://cryptixchat.loseyourip.com/arpspl...Sploit.zip

[Jin Goddo]

Care to explain the file that it drops?

https://www.virustotal.com/en/file/5f9fe.../analysis/

[MR - X]

Care to explain the file that it drops?

https://www.virustotal.com/en/file/5f9fe.../analysis/

The file this program uses to arp spoof and catch packets on the network with is intercepter-ng

And mostly AV just shows false positives for intercepter-ng anyways because it was packed with armadillo PE packer.

[wellah]

This looks extremely nice, good job OP!

[Axion]

What is Nirsoft password recovery doing there?

[MR - X]

What is Nirsoft password recovery doing there?

Go to intercepter-ng website and scan there CE builds

http://sniff.su/

My program uses the exact build from intercepter-ng website,
pretty sure its a false positive anyways as I didnt see intercepter-ng sending any remote packets. It might just use a header that nirsoft password extract uses to read or decrypt certain passwords captured in the packets as plain text when using stdout.