Author Topic: Surely ARP Poisoning  (Read 1571 times)

0 Members and 3 Guests are viewing this topic.

Offline 10r03r

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Surely ARP Poisoning
« on: December 28, 2013, 06:28:09 pm »
Hi there,

I have a web server in my network, how can I redirect all request that is going to that web server back to my box. I mean if others try to connect to that web server, instead connect to my box apache server.  ???

Thanks you all.
« Last Edit: December 29, 2013, 07:34:25 am by 10r03r »

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Maybe ARP Poisoning
« Reply #1 on: December 28, 2013, 08:24:33 pm »
Wow you are clueless.
Study some TCP/IP and come back in 3 months, than we talk.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Phage

  • VIP
  • Overlord
  • *
  • Posts: 1280
  • Cookies: 120
    • View Profile
Re: Maybe ARP Poisoning
« Reply #2 on: December 28, 2013, 09:01:11 pm »
There are many ways of doing this and a simple Google search would have given you loads of links to guides and articles about this.
"Ruby devs do, in fact, get all the girls. No girl wants a python, but EVERY girl wants rubies" - connection

"It always takes longer than you expect, even when you take into account Hofstadter’s Law."

Offline 10r03r

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Maybe ARP Poisoning
« Reply #3 on: December 29, 2013, 07:29:20 am »
Wow you are clueless.
Study some TCP/IP and come back in 3 months, than we talk.

Thanks for reply Proxx,

I know it's simple stuff and I already have CCNA and I'm good with Networking, but I had to make sure.
I know it all the way, arpspoofing for poisinning and iptables to redirect all dst traffic to webserver back to my box, and rest of traffic to gateway.

But as I told you I wanted to know what is the best possible way.


There are many ways of doing this and a simple Google search would have given you loads of links to guides and articles about this.
Thanks.

Staff note: I have now edited the posts for you, but please don't double post.
« Last Edit: December 29, 2013, 12:14:05 pm by Phage »

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Maybe ARP Poisoning
« Reply #4 on: December 29, 2013, 12:35:56 pm »
Thanks for reply Proxx,

I know it's simple stuff and I already have CCNA and I'm good with Networking, but I had to make sure.
I know it all the way, arpspoofing for poisinning and iptables to redirect all dst traffic to webserver back to my box, and rest of traffic to gateway.

But as I told you I wanted to know what is the best possible way.

Thanks.

Staff note: I have now edited the posts for you, but please don't double post.

Well in that case I am very suprised you suggest arp poisoning, even though that would be belong to the list of options , I would put that at the bottom.
And instead of having that traffic go to that box in the first place why not the other way around ?
>>   -------- >>>> --------->>
host            box1             server
With IPtables you can make such a forward.

Which also raises another question , why on earth would you want to do that?
Am I correct that you want to sniff or inject traffic ?
You really have to give a little more detail.

« Last Edit: December 29, 2013, 12:37:27 pm by proxx »
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline 10r03r

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Maybe ARP Poisoning
« Reply #5 on: December 29, 2013, 03:52:31 pm »
Well in that case I am very suprised you suggest arp poisoning, even though that would be belong to the list of options , I would put that at the bottom.
And instead of having that traffic go to that box in the first place why not the other way around ?
>>   -------- >>>> --------->>
host            box1             server
With IPtables you can make such a forward.

Which also raises another question , why on earth would you want to do that?
Am I correct that you want to sniff or inject traffic ?
You really have to give a little more detail.

Hi, that's why I asked for your opinion.

Actually I want to Phish. I want all clients see the same page (first page is login page) on my box.

Please let me what you would do?

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: Maybe ARP Poisoning
« Reply #6 on: December 29, 2013, 06:04:54 pm »
Hi, that's why I asked for your opinion.

Actually I want to Phish. I want all clients see the same page (first page is login page) on my box.

Please let me what you would do?

Well since you ask so nicely, DNS spoofing would do the trick.
Just forge the requests, key is to be faster than the real DNS server.
Also this is not very intrusive and difficult to detect.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline 10r03r

  • NULL
  • Posts: 4
  • Cookies: -1
    • View Profile
Re: Maybe ARP Poisoning
« Reply #7 on: December 29, 2013, 09:20:05 pm »
Well since you ask so nicely, DNS spoofing would do the trick.
Just forge the requests, key is to be faster than the real DNS server.
Also this is not very intrusive and difficult to detect.

Mission Accomplished with ARP Poisoning (Took only 10 seconds)  :o
Took me few months to get access to this network, I had to do it in minutes, that was why I asked the question, anyway took shorter that I thought.  :D
Appreciate your time Proxx.