Advanced Infrastructure Penetration Testing

ARP attacks

Address Resolution Protocol (ARP) is a protocol that maps the IP addresses with their associated MAC addresses, based on the RFC 826 standard. ARP is implemented in many operating systems, including Linux.

You can check it using the arp command:

Attackers can exploit its cache to perform man-in-the-middle attacks using a tool such as Ettercap:

If you are already using Kali Linux, you can also use the dsniff utility:

Attackers can ...