PHPMine
<? if(PHP > $Expectations) echo $Results ?>
by Angel S. Moreno
UNDER SOME SERIOUS CONSTRUCTION LINKS MAY NOT WORK
Asked 2008-05-22 19:36:29 by jglw21
Is is possible to write a socket in PHP that uses ARP. It's not in the list of available socket protocols. How would you go about building one?
I wanna see if I can do a man in the middle attack on my unsuspecting house mates just for giggles. I found a program called windump that monitors traffic, but I can only see UDP transmissions from other machines, so I need to spoof that I am the router.
ARP requests/responses communicate the relationship between MACs and IPs on the LAN. If I just assume a MAC it won't mean I get sent the outbound traffic as the other nodes will still have the correct IP stored on their system.
Just out interest, I've discovered an alternative using the icmp protocol, which is one of the inbuilt protolcol types in PHP. Using type 5 redirects, usually sent from routers, you can convince the victim that routing their packets to me will get them to their destination quicker.
Anwered 2008-05-22 19:49:03 by Dot C
I have serious doubts about your concept.
I see you can monitor the traffic, but what you really want to do with ARP? and why PHP? this is enigmatic to me.
if you want to "spoof that you are the router", rather get
http://www.klcconsulting.net/smac/
and change your own MAC address to that of the router.
(maybe you don't even need SMAC, if your network adapter supports changing MAC by itself, check in Device Manager / network adapter name / Advanced if it has a "Network Address" or "Network Service Address" listed)
warning, you temporarily disrupt your usual (routed from/to Internet) traffic doing this.
Anwered 2008-05-23 15:16:29 by CPTS
ICMP is the way forward
Questions and answers provided by the Yahoo Answers Community.