Sniffing & MITM

Ettercap

Classic suite for MITM attacks on LAN.

intermediate

Linux

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Teaching ARP spoofing concepts in a closed lab.

Unified sniffing; select targets; ARP poisoning; filter traffic.

Historical and still educational for MITM fundamentals.

Commands & usage

sudo ettercap -G

sudo ettercap -T -M arp:remote /gateway/ /target/

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

Responder

LLMNR/NBT-NS/MDNS poisoner that captures NetNTLM hashes on LANs.

Bettercap

Network attack framework for recon, MITM, sniffing, and wireless.