Penetration Testing mailing list archives

Re: Arp spoofing & dsniff


From: "Arturo \"Buanzo\" Busleiman" <buanzo () buanzo com ar>
Date: Thu, 9 May 2002 23:08:47 -0300 (ART)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 9 May 2002 miguel.dilaj () pharma novartis com wrote:

You can use WCI (available in the Tools section in Securityfocus' website)
to do the arp spoofing, and then use the sniffer you like (ethereal,
sniffitNT, etc.)

This is something I'd like to know: Is [Spoofing] the correct term for
this ARP modification technique? Would "ARP Poisoning" be a better or
correct one than 'spoofing'?.

I believe to 'arp spoof' is incorrect, because you just modify it, as it
is a table, not something like an IP address.

Anyway, I'd appreciate if the community could point out the right one.

- From Ettercap's README's INDEX:

5.4   ARP based sniffing
5.4.1    arp poisoning
5.4.1.1    public arp
5.4.1.2    smart public arp

Right, but ARP0c2 and WCI document this:

    ARP0c2 (Linux) and WCI (Windows)
- ->  ARP Spoofing tool
    http://www.phenoelit.de/arpoc/index.html

bye!

PS: Kinda Offtopic, I know, but where could we discuss this? Right, better
reply to my private address.

Arturo "Buanzo" Busleiman -=( RareGaZz-Team Member raregazz.com.ar )=-
www.buanzo.com.ar (Linux, Literatura) - GNU/Linux USERS, MP Ediciones
GNU's es_AR Team Leader - Profesor CIUA (www.linuxcollege.com.ar)
Moderador de Seguridad () alipso com - INFUSION Rock Alternativo
Turcin Soluciones Informaticas http://www.turcin.com.ar
PGP/GnuPG Public Key available at horowitz.surfnet.nl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE82yux+kypiSoPpFoRAl/UAKC1W0ArPAXYEIjZdxxK/QJljXJqNACfYOpe
LYu0lePSizZJDT8IackVRTI=
=EhvO
-----END PGP SIGNATURE-----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: