Network layer - simple ARP disconnection

Catalog

One 、ARP agreement

Two 、 Environmental preparation

The environment ： The physical machine +kali

Gadget ：namp/fping+arpspoof

3、 ... and 、 Principle of network disconnection attack

Four 、 Nonsense , Open dry open dry

1） Physical machine viewing network segment and being attacked ip

2）kali Choose a network card need ifconfig In the same network segment as the physical machine （ Be careful ）

3）kali Scanning network segment survival host

4） Observe whether the physical machine can access the Internet （ Sure ）

5） Attack command eth0 It's with physical machines ip Network card in the same network segment

6)  Successfully disconnected

7） Restore the network   kali ctrl+c  Closing order

tips： Connect to the campus network   Try your roommate's ip Well ！

---

One 、ARP agreement

ARP（Address Resolution Protocol） Address resolution protocol , The aim is to achieve IP Address to MAC Address translation .

When communicating between computers , Computers need to know who the target computer is （ Just like we communicate , Know who the other person is ）, It needs to involve MAC Address , and MAC Is the unique identifier of the real computer .

Why ARP What about the agreement? ？ Because in OSI In the seven-tier model , Encapsulate and send data from top to bottom , Then unpack and receive data from bottom to top , But the upper class （ The network layer ） Concerned IP Address , The lower class is concerned about MAC Address , This is the time to map IP and MAC.

Two 、 Environmental preparation

The environment ： The physical machine +kali

Gadget ：namp/fping+arpspoof

3、 ... and 、 Principle of network disconnection attack

The illustration ARP agreement （ Two ）ARP Attack principle and practice - You know (zhihu.com)https://zhuanlan.zhihu.com/p/367998688

Four 、 Nonsense , Open dry open dry

1） Physical machine viewing network segment and being attacked ip

 2）kali Choose a network card need ifconfig In the same network segment as the physical machine （ Be careful ）

3）kali Scanning network segment survival host

fping command

fping -g 192.168.1.0/24

 nmap command （ The physical machine cannot be scanned , Because it is the host ）

nmap -sP 192.168.1.0/24

It is recommended to use ,fping

4） Observe whether the physical machine can access the Internet （ Sure ）

 5） Attack command eth0 It's with physical machines ip Network card in the same network segment

sudo arpspoof -i eth0 -t  The physical machine ip  gateway ip

6) Successfully disconnected

 

 7） Restore the network   kali ctrl+c  Closing order

tips： Connect to the campus network   Try your roommate's ip Well ！