ARP Poisoning

[jimbo at abs.net (jim)]

If the host is already compromised, you can use the "arp" command to 
make a static arp entry.  If it's not, you can use the dsniff utility to 
poison its arp cache.

Note that this is a layer 2 redirection so the machine to which you're 
redirecting traffic must be on the same IP subnet.

Jim

Bryan Richardson wrote:
> Hello All,
>
> I've poked around a little bit in the code and on the mailing list,
> but I haven't found an answer to a question I have:
>
> Is it possible to conduct ARP poisoning (or some other act) so as to
> direct traffic from a compromised host destined for a particular IP
> address to the attacker's machine?
>
> --
> Thanks!
> Bryan
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
>