ARP Spoofing (but not like the others)

Usage

Parameter	Description
targetMAC	MAC address of the victim to send the attack to
spoofedIP	Ip entry in the ARP table of victim to be altered
spoofedMAC	New MAC address to be set
interface	Interface to use to send attack from
listInterfaces	Will list interfaces of the machine
interactive	Run this tool in interactive mode, provide quick way to edit current settings
help	Displays help on how to use this

Example

Build

At the root of the project, run

go build .

How-To

First look for the interface name of NIC you want to use by running ./arp-spoof -listInterfaces.

In the commands below, our machine will send packets using interface eth1 on Linux, \Device\NPF_{94E6ABD7-B890-4E28-B454-6613FE5D2136} on Windows to the machine with NIC that has MAC address 00:15:5D:09:B8:34, that will receive packets telling it machine with IP 200.201.202.144 has MAC address DE:AD:BE:EF:11:12.

Linux

• Must be run as root

sudo ./arp-spoof -interface=eth1 -spoofedMAC=DE:AD:BE:EF:11:12 -spoofedIP=200.201.202.144 -targetMAC=00:15:5D:09:B8:34

Windows

• Must be run as administrator
• Needs Npcap installed

.\arp-spoof.exe -interface "\Device\NPF_{94E6ABD7-B890-4E28-B454-6613FE5D2136}" -spoofedMAC DE:AD:BE:EF:11:12 -spoofedIP 200.201.202.144

Interactive mode

In interactive mode, you can edit the value by clicking it, or simply increase/decrease it, by overing and using the mouse wheel for a quick editing.

Display arp table for given IP root using powershell

$IP_ROOT="200.201.202."

while ($True)
{
    $arpTable = (arp -a | Select-String -Pattern "^ *$IP_ROOT*" -AllMatches) -join "`n"

    Clear-Host
    Write-Host $arpTable

    Start-Sleep -Seconds 1
}

Notes

• If you're using this tool on a Hyper-V VM, make sure you enabled, for the network interface sending the ARP packets, the MAC address spoofing option

Author

SOARES Lucas