Hello everyone, welcome back. So, let's take a look at the
up whooping attack.
Options for resolution protocol. Now.
This is a protocol that all the machines use in
order to resolve the IP address and a Mac addresses, to
MAC address is typically the unique address, that
all the network adapters carry with them. So
over a local area network connection initially
whenever we try to connect between computers.
The particular course is going to check in
the local our table so that our table. If
it is called an entry, then it is going to send.
The data to that specific IP address and the Machine. So
in order to do that, the apps protocol
itself is good to broadcast throughout the
network, seeking the information as to which machine owns
that particular Hardware at range. So now, let's
talk about the attack itself. So the attacker is quite
interested. In performing the attack is because this
is mainly used in man's ability over a local
area network.
And by doing, so what attacker is trying to achieve, is
that all the traffic is routed through the. So,
in order to do that. All
the victims machines will actually be bombarded
with data to update the
rock table in such a way, based
on Doc table. All the data is again going to
be routed through the attacker.
So the common reasons why off
spoofing attack is used is to create do service. For
example, when an attacker want
to bombard, a particular machine, then you can update the optical for
all the other order machines. So
by doing, so all the machines would
be confused and rerouting, all the
traffic to one particular machine resulting in
pain and of service attacks.
And now, the common attacks are performing Manda metal
scenario in a either, too, stiff the data, or to
hijack, an existing session for a particular protocol.
Now, let's go ahead
and look at the demo.
So let's try to see. What are
the available network adapters on
a local machine.
So by using the, if config command we
can understand what are the available network adapters? So
you have you only have one adapter that is eth0 connected
and other is a loopback adapter.
Now, in order to figure out the
exact harder address that is assigned to our local,
eth0. Let's go and type the command IP
Link.
It's by doing. So. We see the particular, ethernet Hardware
address. That is assigned, that is in form of x.
Now, let's take a look at the local art table by using the
arc command.
So this part of the machine has communicated to all of
these machines over the network and it
has a table, which has an existing hardware tools.
So, whenever this particular machine
is going to communicate, it is going to
send to the specific Hardware address that has assigned to this IP
address.
Now, let's try and perform mathematical
props to think so, for this
particular scenario will be taking a look at one
of the tool known as either cap.
This is something that is available in built with
poly toolkit.
So the first step would be that by default. It's
this tool will actually start start
the network sniffing. So before that, let's
go ahead and see what are the hosts that
are available for our Network by going to hose and
scanning for Rose will get the list.
So again, going back to host list. We see a
huge table.
Letting us know what are the different network devices
or servers connected to
particular network with the particular Mac address. Now,
for this problem, attack. We are taking one.
Target to be the Gateway in my scenario. It
is 10001. So this is the router or
the Gateway that I'm going to address a Target.
The second pocket would be a specific machine for whom
we are we are trying to perform Adams attack. So
my case it is the 96 machine that
is a Windows machine that is available with the network. I'm
going to add this as a second target.
And after doing that, we are going to start the
ARP poisoning.
So, when we start out poisoning, we see two
options, one is to sniff the remote connections. That is something
that we want in order to gather sensitive data. And
second is to specify which is about we
poisoning. That means we just want to broadcast and not them
to send back the data to us. So since we want all
the traffic to go through us, we will uncheck this
second option.
That's we see the poisoning. Contact us started.
So now, let's take a normal scenario on
the victim side.
So this is a victim who's trying to access a page
and where there's a login page and the tip might
fill out any sense information such as username passwords.
So after the user submits the page, we see that this
particular tool was automatically able to capture the
username and a password for a
particular website that the victim
was accessing.
So this is one such scenario home animal attack can
be performed using our poisoning such that all the
traffic is sent through that Adam Sheen. This
retake the scenario. We have an attack to user and
the server. So initially the
use of might send a request to the server and
that occur is trying to spoof the
hardware address in such a way and both the cases
that now, the victim and the router
or the Gateway believe that the
Need to communicate to that accompany. So in
such scenario, particular man-in-the-middle attack can
happen. That's it for this video. Thank
you.