Definition
An attack technique that tampers with IP–MAC address mappings using forged ARP messages to intercept or modify network traffic
Visual IT Encyclopedia › Information Security › Network Security
Visual IT Encyclopedia › Information Security › Network Security
Definition
An attack technique that tampers with IP–MAC address mappings using forged ARP messages to intercept or modify network traffic
Condition: The victim PC, the gateway and the attacker are on one LAN. The ARP tables of the victim PC and the gateway fill in automatically (dynamic).
0 / 5
ARP Spoofing
An attacker on the same LAN wants to intercept the traffic between the victim PC and the gateway. On a LAN, a device must know the other side's MAC address before it can send data. The table that pairs IP addresses with MAC addresses is the ARP table, and the attacker tricks that table.
Example: When the victim PC goes online, every packet passes through the gateway.
C:\> arp -a (none yet)