In this program, I am going to write an ERP spoofing program.
You may ask, what is an ARP spoofing program?
Okay, let me show you here in a diagram.
Okay.
Here you see it is a typical network.
And this is the access point.
This is the resource or internet okay.
Public internet.
We have two computers connected to this access point okay.
Or router.
So this is the victim.
It is a normal network okay.
Every time this victim try to connect to the internet, it tries to send a request to access point and
then receive that response.
And it connects to internet as well as the hacker computer.
But the ARP spoofing is a little different.
Whenever the hacker tries to get access to request and response of a victim and access point, so it
becomes man in the middle.
So this hacker sends a response or send a request to this access point and telling this that I am this,
this machine or this victim.
Okay, I have IP for this victim.
And also this hacker machine sent a request to this one.
Okay.
To victim that I am the router.
And this victim will send its packet to this hacker computer.
And it is not clear for the victim that it is a hacker computer or a router.
So it thinks that it is.
This computer is a router.
So it sends all its packet to hacker computer.
And, uh, the access point received from hacker computer and think that it is this victim machine.
And that is explained right here.
As you see, this is the victim.
This is the hacker again, it is the access point.
This hacker machine will send a request to access point and telling me that I am at ten 0 to 8, which
is IP for victim.
And also it will send a request to this that I am ten 0 to 1, which is the access point.
And after that the victim will send a all the packets to the hacker computer.
Okay.
And the hacker computer will be able to capture all the data that is, uh, moving through this hacker
computer.
And then, uh, after capturing it, we will be writing another program to analyze it.
Okay.
To do whatever we want.
Okay, so this ARP spoofing program will be able to capture the data.
Okay.
Will be able to become a man in the middle.
Okay.
While we run this, our computer will become man in the middle.
That means all the packets from other computer will flow through this computer, and then we will be
able to capture it.
For example, passwords, anything we want, okay.
We will capture it and we can use it in any good ways or bad ways.
So let me come to see and hear.
If I use ARP Dash A and hit enter.
Here you see that each computer, each computer or even router has an IP and has a mac address.
Here you see that this router, this is the router.
And it is telling that this IP is at this Mac address okay.
This is the Mac address belongs to a router.
You may ask what how do you know that it is the IP for router okay.
There is another command called route dash in.
When I hit enter you see that we have a gateway here.
Gateway is the router okay.
It has an IP.
The IP is ten 021 that is here and it has a mac address okay.
So the Mac address for that is this one.
Now if I come back to windows Machine here.
And uh let's see this is the, the other machine okay.
Which is Windows 7.
Now if I use ARP Dash a hit, enter.
Here we see a lot of things.
Okay.
The first one is the router.
And you see that this IP belongs to this Mac address.
Okay.
So later we will be able to change this.
For example we will uh, force this machine to understand that this IP belongs to or to my Mac address.
For example, to this Mac address.
Okay.
Where is that?
That is here, for example, that belongs to this one.
So after that, whenever this computer try to connect to internet, all the packet will come to Kali
machine and then move to router and then to the internet.
Okay.
So we will be writing that program in this section.
So thanks for watching and let's go start building our program.