arpspoof

Redirect LAN traffic via ARP poisoning.

KaliParrotLinuxhigh

pkg: dsniff

arpspoof poisons ARP caches so a victim’s traffic flows through you for interception.

Syntax

arpspoof -i {iface} -t {victim} {gateway}

Example

arpspoof -i eth0 -t 10.0.0.5 10.0.0.1

Tells the victim you are the gateway, routing their traffic through you.

Advantages
  • Simple, reliable MITM primitive
  • Pairs with sniffers
Disadvantages
  • Disruptive; detectable
  • Enable IP forwarding or you DoS
Tags
#arp#mitm

Official docs: dsniff

Related commands

Frequently asked questions

What is arpspoof used for?
arpspoof poisons ARP caches so a victim’s traffic flows through you for interception.
What is an example arpspoof command?
A common example is: arpspoof -i eth0 -t 10.0.0.5 10.0.0.1 — Tells the victim you are the gateway, routing their traffic through you.
Is arpspoof part of Kali Linux?
Yes. arpspoof ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dsniff.
What category of security tool is arpspoof?
arpspoof is a Sniffing & Spoofing tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →