30 July 2011

Spoof ARP and ICMP ECHOREPLY Using Linux Socket Filter

Download ARP and ICMP spoof code from here.
# gcc icmp_spoof.c -o icmp
# ./icmp eth0
Opening raw socket
Got raw socket fd 3
Fake MAC address is 00:aa:bb:cc:dd:ee
Created raw socket
Sent ARP reply: 192.168.109.5 is 00:0c:29:98:4f:5b
Received ICMP ECHO from 192.168.109.1 (code: 0 id: 512 seq: 27178)
Received ICMP ECHO from 192.168.109.1 (code: 0 id: 512 seq: 27434)

Reference:
http://blog.fpmurphy.com/2011/01/spoof-arp-and-icmp-echoreply-using-linux-packet-filter.html

No comments:

Post a Comment