arpspoof
Forge ARP replies for man-in-the-middle interception.
TLDR
Poison all hosts for target
$ sudo arpspoof -i wlan0 host_ip
Poison specific target$ sudo arpspoof -i wlan0 -t target_ip host_ip
Bidirectional poisoning$ sudo arpspoof -i wlan0 -r -t target_ip host_ip
SYNOPSIS
arpspoof [-i interface] [-c own|host|both] [-t target] [-r] host
DESCRIPTION
arpspoof forges ARP replies to intercept network packets. It sends fake ARP responses to redirect traffic through the attacker's machine, enabling man-in-the-middle attacks for network analysis and security testing.
PARAMETERS
-i interface
Network interface to use-c own|host|both
Which hardware address to use when restoring the ARP configuration on cleanup (default: own)-t target
Target IP address to poison (poisons all hosts if omitted). May be repeated to specify multiple targets-r
Poison both host and target to capture traffic in both directions (only valid in conjunction with -t)host
IP address of the host to impersonate (usually the gateway)
INSTALL
sudo apt install dsniff
sudo dnf install dsniff
sudo pacman -S dsniff
nix profile install nixpkgs#dsniff
CAVEATS
This is a penetration testing tool that can disrupt network traffic. Only use on networks you own or have explicit authorization to test. Requires root privileges and IP forwarding enabled for traffic to flow.
HISTORY
arpspoof is part of the dsniff package, a collection of network auditing tools for penetration testing and security analysis.
