2KKUU7ita

148
Part III: Hacking Network Hosts
Figure 8-13:
ARP poisoning
results
in Cain &
Abel.
10. Ctrl+click all the hosts in the right column that you want to poison.
11. Click OK and the ARP poisoning process starts.
This process can take anywhere from a few seconds to a few minutes
depending on your network hardware and each hosts’ local TCP/IP
stack. The results of ARP poisoning on my test network are shown in
Figure 8-13.
12. You can use Cain & Abel’s built-in passwords feature to capture passwords
traversing the network to and from various hosts simply by
clicking the Passwords tab.
The preceding steps show how easy it is to exploit a vulnerability and prove
that Ethernet switches aren’t all they’re cracked up to be from a security
perspective.
MAC address spoofing
MAC address spoofing tricks the switch into thinking your computer is something
else. You simply change your computer’s MAC address and masquerade
as another user.
You can use this trick to test access control systems, such as your IPS/firewall,
and even your operating system login controls that check for specific
MAC addresses.