EvilZone

Hacking and Security => Hacking and Security => : nCursed September 26, 2014, 02:15:49 PM

: Using ARP Spoof to denial of service a remote server?
: nCursed September 26, 2014, 02:15:49 PM
Hello, I am new here, and registered just now to ask this question, and I hope someone expirienced with ARP poisoning/spoofing could answer this.


Lets say there is a network with a lot of hosts(maybe a big school) and the WAN connection has a big bandwidth. Could you then use some sort of ARP spoof/poisoning to direct all of the hosts next destination to a specified website(example.com) so that it creates heavy load on that website's server?


I am not expirienced with ARP spoofing/poisoning, and I am not even sure if ARP is the correct method to be used. I think I might mean DNS spoofing when I say ARP spoofing. But maybe you can use ARP poisoning to redirect everyones DNS request to one specific website.
: Re: Using ARP Spoof to denial of service a remote server?
: Stackprotector September 26, 2014, 02:23:24 PM
Yes it's possible to redirect all traffic to one website if the network is vulnerable to it. But it doesn't make sense because they are all going over one link and you can also just flood it with one or two machines with good links. The best thing is to have different computers on different links/connections flooding a host.
: Re: Using ARP Spoof to denial of service a remote server?
: proxx September 26, 2014, 04:39:55 PM
In fact you don't even have to poison the cache.
You can setup a rogue DNS server which is faster than the upstream DNS.
You can sniff traffic and repond with spoofed packets.
: Re: Using ARP Spoof to denial of service a remote server?
: Axon September 26, 2014, 06:18:43 PM
I think ettercap has a plugin for this task. However, you can carry out a ddos attack or syn flooding. 
: Re: Using ARP Spoof to denial of service a remote server?
: bloodgoodytjn October 09, 2014, 09:11:31 AM
But it doesn't make sense because they are all going over one link and you can also just flood it with one or two machines with good links.
: Re: Using ARP Spoof to denial of service a remote server?
: kenjoe41 October 09, 2014, 03:38:49 PM
But it doesn't make sense because they are all going over one link and you can also just flood it with one or two machines with good links.
Moron, that is what Factionwars said. If you intended to quote, i would have expected some more input by you. Get a life!