Network Security – Arp spoofing



So…. what is arp spoofing (poisoning)…. and what are it’s implications? ARP spoofing involves tricking a machine into thinking that you’re machine is, yet another. Let’s put this in IP address terms. Let’s say that 192.168.0.1 is the default gatway on the network and 192.168.0.150 is our target. We are given another network address – say 192.168.0.250…. Arp spoofing would tell 192.168.0.150 that OUR network adapter is the place to send information destined for 192.168.0.1, (and we could also tell 192.168.0.1 that WE are the rightful recipient of data sent to 192.168.0.150). These is done by offering up our MAC address as the legitimate desitination to each machine through a crafted ARP response.


Now, on first reading all of this you think….. wow that sounds hard. Actually there is software readily available that does this in just a few clicks (or with a simple command line syntax.) So, it’s VERY easily done once you’re in the same subnet as the machines that are targetted. In fact, it’s possible to arp-spoof an entire subnet this way, say capturing all traffic from the subnet to the gateway. Once all that traffic is routed through the attacking machine, then…. it can be analyzed.

There is software that quickly and easily collects passwords from this stream of data, or perhaps logs web addresses, captures mail transfered, or can even alter data in the stream (maybe replacing images on a web page or directing you to a page other than you intended.)

So basically this means that ANY untrusted machine connected to your LAN (as long as it’s on your subnet or “upstream” towards the internet), could easily sniff any and all data flowing through the network. Of course, if the hostile machine is upstream, it could only sniff traffic moving outside of the LAN to the router to the internet for instance.

Related Posts

Blog Traffic Exchange Related Posts
  • The D-Link DWL-800AP+ as a wireless repeater to extend wireless range - Part 3 So, now that I was "in" the DWL-800AP+ it was time to see if I could set it up as a repeater. I visited the "wireless" tab of the web based configuration and chose Repeater mode instead of AP mode and saw that I would need the Mac address of......
  • NY requires businesses to disclose security breaches. The Register writes that New York has passed a law that will require local government agencies and businesses to disclose security breaches. (System broken into or data stolen). I can understand businesses being reluctant to disclose this kind of information. "What will they say about us", "bad reputation", "we'll lose......
  • Florida leads in Sony Rootkit infections.... According to the securityfix, Florida leads the nation in the number of networks with signs of computers infested with the sony rootkit. In total, 12,588 networks in Florida seem to have computers with the rootkit. Now, these numbers could reflect as few as one machine per network.... or as many......
Blog Traffic Exchange Related Websites
  • Gators' Winning Streak Ends with a 32-13 Alabama Victory With Alabama and Florida both 12-0 for the season, both teams knew that only one could remain undefeated after Saturday's game. That team was Alabama, reigning over Florida 32-13, and knocking the Gators to 12-1 for the season. In the Georgia Dome, 75,514 fans turned out to see Alabama......
  • Federal and State Estimated Quarterly Tax Payments are Due! On Wednesday, I did a quick estimate of my taxes to see how much more I would owe for federal and state taxes and I realize that I may owe so much that I would be charged a penalty for underpayment! I guess I didn't realize how much I made......
  • Jan07 Review of 2007 Goals and Progress Report I have made through my first full month.  To celebrate I will be reviewing my 2007 RateLadder.com Goals. Jan Yearly Status 2007 Year Ending Account Value $3,615.98 On track, but expectation not yet met Return on Investment (ROI) 15.75% Stretch Goal Exceeded (15.75% is cumulative average and I have 0......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site