1 00:00:00,900 --> 00:00:07,650 In the previous video we have seen how we can perform ARP spoofing and now in this video we will going 2 00:00:07,650 --> 00:00:10,770 to see how we can perform ERP poisoning. 3 00:00:11,280 --> 00:00:20,430 So let's head up to applications and go to sniffing and spoofing and open this tool called as it graphical. 4 00:00:20,640 --> 00:00:24,570 So we are using this tool in order to perform ERP poisoning. 5 00:00:25,800 --> 00:00:27,540 Now let's go to sniff. 6 00:00:27,960 --> 00:00:32,190 Unified sniffing it is zero is our interface. 7 00:00:32,190 --> 00:00:32,660 So hit. 8 00:00:32,700 --> 00:00:33,240 Okay. 9 00:00:34,350 --> 00:00:38,340 Now let's move to Target's current target. 10 00:00:39,450 --> 00:00:40,920 Now in Target one. 11 00:00:41,370 --> 00:00:44,270 So Target one is our router. 12 00:00:44,280 --> 00:00:46,950 So ten .0.2.1. 13 00:00:48,090 --> 00:00:51,360 Let's add target two, which is window ten. 14 00:00:51,600 --> 00:00:54,090 So ten .0.2.7. 15 00:00:54,870 --> 00:01:01,860 Okay, now let's move to MDM and start ERP poisoning. 16 00:01:01,860 --> 00:01:02,550 Right. 17 00:01:06,860 --> 00:01:07,430 Then. 18 00:01:09,770 --> 00:01:16,460 So this is how we can use ether cap in order to perform ERCP poisoning attack. 19 00:01:16,760 --> 00:01:17,360 Right. 20 00:01:17,450 --> 00:01:24,710 But here in the list below you will see IRB poisoning victims are blank, so no worries. 21 00:01:24,740 --> 00:01:30,260 Go to host and select scan for host. 22 00:01:31,100 --> 00:01:32,420 So see below. 23 00:01:32,720 --> 00:01:40,430 It says it's scanning for merge target to host found so it automatically adds the two victims on its 24 00:01:40,430 --> 00:01:41,090 own. 25 00:01:41,480 --> 00:01:42,020 Right. 26 00:01:43,190 --> 00:01:47,120 Now let's go to middle ERP poisoning again. 27 00:01:47,120 --> 00:01:47,930 Select and hit. 28 00:01:47,930 --> 00:01:49,880 Okay, done. 29 00:01:50,990 --> 00:01:53,780 Now let's go to terminal. 30 00:01:56,700 --> 00:02:14,550 And perform dcp dum again hyphen i80 then hyphen n then our port which is 830 and then define host so 31 00:02:14,550 --> 00:02:16,620 host what we are window ten. 32 00:02:19,660 --> 00:02:20,240 Done. 33 00:02:20,830 --> 00:02:28,860 So now you know how to perform ERP spoofing and ERP poisoning right now in order to get your traffics 34 00:02:28,870 --> 00:02:29,440 again. 35 00:02:29,590 --> 00:02:32,680 Just simply start Wireshark and start monitoring. 36 00:02:33,430 --> 00:02:34,150 That's it.