Re: AW: ARP Poisoning

[Will Tell <nosphie () rootshell be>]

In-Reply-To: <9F984E1366F3D411988100508BF3A64201AA8149 () exmailn01-e18-2 itellium com>

Hello Bernhard,
You are right. Some Windows recognize an arp-poisoning,
but in this case you have to "arp-storm" only the
others(not the windows victim).
Then poison the windows-arp-cache in the name of the
router(,gateway,...) and the same with the
router-arp-cache.
And the 2nd if u ping the router (router ip) you ping
not the router.You ping the poisoner (me). Because your
arp cache think i am the router.And i answer u with a
ping. So even on linux u dont find me.
Only solution is to look in the arp-cache if it is
poisoned.
For beginner "ettercap" will do a good job. In this
programm is a point "looking for other poisoners".
So you might find me.

Will Tell

 
> Hi Michael!
>
> I did not test it out too much, but if you are in the
same network =
> windows
> will warn that the same IP-Adress is twice on the net.
> On Linux you see it, if you ping the router, he shows
that the ping is
> redirected.
> can anyone verify this? other than that ?????
>
> Mit freundlichen Gr=FC=DFen/ sincerely yours
>
>
> Bernhard Fuchs=20
> Junior System-Engineer=20
> IT-Infrastruktur
>
> ITELLIUM=20
> Systems & Services GmbH=20
> F=FCrther Stra=DFe 205=20
> 90429 N=FCrnberg=20
>
> Tel.:   +49-911-14-27321=20
> Fax:    +49-911-14-22016=20
> mailto:bernhard.fuchs () itellium com=20
> http://www.itellium.com