ARPspoof

One of the first tools we will look at is ARPspoof. ARPspoof is used to send fake ARP messages to a victim's machine, tricking it into sending its traffic to the attacker's machine or another gateway on the network. Since we have an idea of how ARP poisoning and spoofing works, we can jump right into the practice of using this tool. We use the following syntax:

arpspoof -i <network adapter> -r -t <victim IP address> <gateway IP address>

In our lab, I'm performing an MITM attack between a victim machine (10.10.10.15) and a gateway (10.10.10.1), as shown in the following screenshot:

ARPspoof will begin sending gratuitous ARP messages ...

Get Learn Kali Linux 2019 now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.