Advanced Infrastructure Penetration Testing

Rogue DHCP server

A rogue DHCP server (this can be a home router or a modem) is a server implemented by an attacker in a network to perform man-in-the-middle attacks, or sniffing the network traffic. This implementation of a rogue server lets the attacker gather a great deal of information, including DNS server information and the default gateway. To defend against DHCP attacks, you need to use DHCP snooping, which is a switch feature to identify ports that respond to DHCP requests.