arpspoof
Redirect LAN traffic via ARP poisoning.
KaliParrotLinuxhigh
pkg: dsniff
arpspoof poisons ARP caches so a victim’s traffic flows through you for interception.
Syntax
arpspoof -i {iface} -t {victim} {gateway}
Example
arpspoof -i eth0 -t 10.0.0.5 10.0.0.1
Tells the victim you are the gateway, routing their traffic through you.
Advantages
- Simple, reliable MITM primitive
- Pairs with sniffers
Disadvantages
- Disruptive; detectable
- Enable IP forwarding or you DoS
Tags
#arp#mitm
Official docs: dsniff ↗
Related commands
Frequently asked questions
What is arpspoof used for?
arpspoof poisons ARP caches so a victim’s traffic flows through you for interception.
What is an example arpspoof command?
A common example is: arpspoof -i eth0 -t 10.0.0.5 10.0.0.1 — Tells the victim you are the gateway, routing their traffic through you.
Is arpspoof part of Kali Linux?
Yes. arpspoof ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install dsniff.
What category of security tool is arpspoof?
arpspoof is a Sniffing & Spoofing tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.