ARP Poisoning

[btricha at gmail.com (Bryan Richardson)]

Hey Jim,

Thanks for the response. That's great news.  One quick question... if my
attack machine is on a different subnet, but I'm pivoting through another
compromised machine, is there a way to still make this work?

--
Bryan

On Thu, Apr 16, 2009 at 9:33 AM, jim <jimbo at abs.net> wrote:

> If the host is already compromised, you can use the "arp" command to make a
> static arp entry.  If it's not, you can use the dsniff utility to poison its
> arp cache.
>
> Note that this is a layer 2 redirection so the machine to which you're
> redirecting traffic must be on the same IP subnet.
>
> Jim
>
> Bryan Richardson wrote:
>
> > Hello All,
> >
> > I've poked around a little bit in the code and on the mailing list,
> > but I haven't found an answer to a question I have:
> >
> > Is it possible to conduct ARP poisoning (or some other act) so as to
> > direct traffic from a compromised host destined for a particular IP
> > address to the attacker's machine?
> >
> > --
> > Thanks!
> > Bryan
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090416/1ed10ab6/attachment.htm>