Describe an experiment of Kali ARP in LAN

       First： This paper only does experiments on my own mobile phone , All the equipment mentioned below use the same WiFi, No network cable for equipment .

       The premise to prepare ： You need to have one equipped with Kali Machine , It can be a virtual machine . Then there must be the same WiFi Get off the Internet , Make sure it's your own , Not against the law , What happened has nothing to do with this article .

       Configuration in this paper ： a 2019.4 Kali Installed machine , Desktop gnome, Don't ask why , I really feel xface It's really disgusting that you have to configure Chinese to go in . And a cell phone of my own , And a website full of pictures （ I didn't borrow a step , There is no the ）.

       Maybe I didn't choose to install net mirror Why , As a result, I did not install it arpspoof This thing , If you're like me , Just do this ：

apt-get install dsniff

       So first you need to query your own ip What's the address

ifconfig

       Because here I use WiFi, Then I need to see wlan0 Below IP How much is the , My is 192.168.1.5, You don't know how much , But what follows is 192.168.1.5 If only you could change your place to your own , The gateway is the default 192.168.1.1

       Then we need to know our and mobile phones IP How much is the , Here we use nmap test .

nmap -sP 192.168.1.5/24

       Mobile phone IP It is measured that 192.168.1.3.

       Then we began to hijack the pictures of the intranet happily ~~~~

       First, let's start IP forward , Otherwise, our mobile phones are not connected to the Internet .

echo 1 > /proc/sys/net/ipv4/ip_forward

       And now we open a new terminal , Give it to your cell phone arp Cheat ：

arpspoof -i wlan0 -t 192.168.1.1 192.168.1.3

       Some students who have read other courses may have to stand up and scold me at this time ：“ How can you even write the gateway address and attack address upside down ！ What stupid tutorial , I won't learn ！”

       Don't be irritable , If there is no reverse here , Chances are you won't catch a single picture . If you write it backwards, you can , Don't ask me how I found such a magical thing , I also checked my blog and experimented .

       Update hints , Find out why we need to write it in reverse here .-t After specifying the target ,ARP The spoofing packet is sent to the designated target , But if you don't specify a target , that ARP The packet will be broadcast , In the above line of code 192.168.1.3 It means to tell the target （ Or radio ） Who are you IP. In other words, the above line of code translates into adult words ：

       adopt wlan0 The network card tells 192.168.1.1, I am a 192.168.1.3.

       The next thing is very simple , direct drifnet Just come up .

drinet -i wlan0

       At this time, what pictures come in on your mobile phone , You can see it in the new black window of your computer ~ But what is worth mentioning here is , Not every picture can be seen , Only pictures that are not stored in the local cache of your mobile phone can be found . If you need to save the picture locally, please query drifnet Detailed usage or query drifnet -h, and drifnet Great slowness , I really don't have any good ideas about this at present , If so, it will be updated .