🛡️

ARP Spoofing Defense

Medium

Free preview · 2 of 5 steps

ARP spoofing: poisoning the neighbor cache

ARP has no authentication — any host can claim to be any IP. The attack: send gratuitous ARP replies to victim and gateway, associating the attacker's MAC with each other's IP.

The victim sends traffic to the attacker (thinking it's the gateway). The attacker forwards it to the real gateway. Both sides are unaware — a classic man-in-the-middle attack.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step