Okay.
And now we have these packet sniffer program that we, uh, created.
Okay.
I also created ARP spoof detector, uh, program here.
Okay.
I just created this file, and we are going to use some of this function that is here, uh, to create
a detector LP detector.
Okay.
So here we have a sniff function, get URL, get login.
We don't need a lot of this.
Okay.
Let me copy all and everything from here.
Right in here.
And then I will remove some of these functions.
Okay.
We don't need the get URL.
Okay.
Because we are not going to use it uh, in this program.
And also we don't need HTTP here.
And also we don't need all this stuff here.
Okay.
Perfect.
The thing we need is scapy dot sniff Iface is equal to interface store is equal to false equal to process.
Net package, which is a callback function.
And we created the callback function right here.
And.
That is it okay.
Here we need to add something like while we are capturing the package I want to see the information
which is uh, inside that.
Um, and I'm going to find out what is it.
Okay.
So here let's use if, if our package.
If package dot as layer okay.
We had Skippy dot AARP.
And here we are going to use and this package um.
As Skippy dot AARP if you are trying to use the AARP.
So we use AARP if we are going to use, for example, the row we use, copy that row, anything.
We can get that from here.
And also we had another thing called OP okay.
This is going to be equal to number two.
So if this is equal to number two then we need to print this.
This is going to be packet dot show okay.
So now let me save this and let's go back here.
Here I'm going to use AARP A and I'm going to find out what is uh you see this is the Mac address for
our uh, for the router okay.
And now I'm trying to do something like.
Uh, do the attack from windows.
But before that, let's go to this location.
City document.
Here we have ARP spoof detector.
Okay.
And here I need to use.
I need to run this.
Okay.
So, uh, Python r spoof detector, hit enter, provide your password.
Right now.
You see, it is doing nothing.
Okay, now let's come back here because we don't have here anything, okay?
We're not capturing anything in the data.
Let's come back here and try to do the attack.
Go to cmd and here let's use Python ARP underscore spoof okay.
And let's come back here.
Here you see that we get this data okay.
And let's use Ctrl C.
Let's come back here.
And use ARP Dash A.
Let's see if it is changed or not.
Here you see this is the IP for the router.
And also this is the Mac address for MyFitnessPal router or the physical address for router.
But now you see that it is changed.
It got changed.
Okay.
Why it is changed?
That is because we have done an attack from Windows on Kali Linux, and right now you see that it is
changed.
It got changed and we got this little information here okay.
Like destination see source, destination source.
And also we have all and everything here like ERP.
ERP ERP we are here.
We are only capturing the ERP packet okay.
So.
Uh right now this is it okay.
Let's go in the next lecture, complete this program and uh, find out if someone is doing attack on
our machine or not.
So let's go and complete this program.
ERP is both detector.