MAC address spoofing Attack

MAC address spoofing tricks the switch into thinking your computer is something else. You simply change your computer’s MAC address and masquerade as another user.
You can use this trick to test access control systems, such as your IPS/firewall, and even your operating system login controls that check for specific
MAC addresses.

UNIX-based systems :

In UNIX and Linux, you can spoof MAC addresses with the ifconfig utility.
Follow these steps:

1. While logged in as root, use ifconfig to enter a command that disables
the network interface.

Insert the network interface number that you want to disable (usually,
eth0) into the command, like this:

[root@localhost root]# ifconfig eth0 down

2. Enter a command for the MAC address you want to use.

Insert the fake MAC address and the network interface number (eth0)
into the command again, like this:

[root@localhost root]# ifconfig eth0 hw ether
new_mac_address

You can use a more feature-rich utility called GNU MAC Changer (http://cut-urls.com/tmwwB) for Linux systems.




 Windows :

You can use regedit to edit the Windows Registry, but I like using a neat
Windows utility called SMAC (www.klcconsulting.net/smac), which
makes MAC spoofing a simple process. Follow these steps to use SMAC:

1. Load the program.
2. Select the adapter for which you want to change the MAC address.
3. Enter the new MAC address in the New Spoofed MAC Address fields and click the Update MAC button.
4. Stop and restart the network card with these steps:
a. Right-click the network card in Network and Dialup Connections and then choose Disable.
b. Right-click again and then choose Enable for the change to take effect. You might have to reboot for this to work properly.
5. Click the Refresh button in the SMAC interface. To reverse Registry changes with SMAC, follow these steps:
1. Select the adapter for which you want to change the MAC address.
2. Click the Remove MAC button.
3. Stop and restart the network card with these steps:
a. Right-click the network card in Network and Dialup Connections and then choose Disable.
b. Right-click again and then choose Enable for the change to take effect. You might have to reboot for this to work properly.
4. Click the Refresh button in the SMAC interface. You should see your original MAC address again.

Read More

MAC-daddy attack ARP poisoning

ARP poisoning can be hazardous to your network’s hardware and health,
causing downtime and more. So be careful!

Using Cain & Abel for ARP poisoning
You can perform ARP poisoning on your switched Ethernet network to test
your IPS or to see how easy it is to turn a switch into a hub and capture anything and everything with a network analyzer.

Perform the following steps to use Cain & Abel for ARP poisoning:
1. Load Cain & Abel and then click the Sniffer tab to enter the network analyzer mode. The Hosts page opens by default.
2. Click the Start/Stop APR icon (the yellow and black circle). The ARP poison routing (how Cain & Abel refers to ARP poisoning) process starts and enables the built-in sniffer.
3. If prompted, select the network adapter in the window that appears and then click OK.
4. Click the blue + icon to add hosts to perform ARP poisoning on.
5. In the MAC Address Scanner window that appears, ensure the All Hosts in My Subnet option is selected and then click OK.
6. Click the APR tab (the one with the yellow-and-black circle icon) to load the APR page.
7. Click the white space under the uppermost Status column heading (just under the Sniffer tab). This re-enables the blue + icon.
8. Click the blue + icon and the New ARP Poison Routing window shows the hosts discovered in Step 3.
9. Select your default route (in my case, 10.11.12.1).The right-hand column fills with all the remaining hosts, as shown in Figure 1.

Selecting your victim hosts for ARP poisoning in Cain & Abel

10. Ctrl+click all the hosts in the right column that you want to poison.
11. Click OK and the ARP poisoning process starts.
This process can take anywhere from a few seconds to a few minutes
depending on your network hardware and each hosts’ local TCP/IP
stack. The results of ARP poisoning on my test network are shown in
Figure 2.

 ARP poisoning results in Cain & Abel.

12. You can use Cain & Abel’s built-in passwords feature to capture passwords traversing the network to and from various hosts simply by
clicking the Passwords tab.


The preceding steps show how easy it is to exploit a vulnerability and prove
that Ethernet switches aren’t all they’re cracked up to be from a security
perspective.

DOWNLOAD Cain & Abel :

LINK 1

LINK 2

Read More

AVG Internet Security 2016 for FREE

   AVG Internet Security : provides you with protection against viruses, malware, spam, scams, phishing, and more. Plus, it has additional features such as a firewall, internet accelerator, privacy protector, and more. AVG Internet Security is the best antivirus protection for you & your privacy. Major Features .


  TERMS AND CONDITIONS :
 
This is a 1-computer 6-month license, for noncommercial use and only for new users of AVG
 
   Description :

 Antivirus
Blocks viruses, spyware, & other malware

Link Protection
Scans web, Twitter®, & Facebook® links

Email Protection
Warns you of malicious attachments

Online Shield
Protects you from harmful downloads

Data Safe
Encrypts & password-protects private files

More Frequent Auto-Updates
Get automatic security updates every 2 hours

Anti-Spam
Keep your inbox free of spam & scams

Shopping Protection
Shop & bank safer with Enhanced Firewall

  

     Download :

       LINK 1

       LINK 2

 

Read More