Thursday, April 9, 2020

How to prevent Arp Poisoning

To prevent your devices from Arp poisoning like Netcut, you must add static arp in your devices and gateway router. If you only set static arp in your devices but not in your router or vice versa, the poisoning will still occur on your devices.
- To add static arp on windows 7/8/10, run cmd as administrator then type and change the following command parameter according to your network setting.

netsh interface ipv4 set neighbors "Local Area Connection" 192.168.10.1 63-d1-54-07-f5-f9 store=persistent
Note :
Local Area Connection is the name of your ethernet devices. 
192.168.10.1 is the ip address of your gateway.
63-d1-54-07-f5-f9 is MAC address of your gateway

 - Type arp -a to check if  the arp entry we entered before has been changed to static.

- To delete the static arp, use this command :
netsh interface ipv4 delete neighbors "Local Area Connection" 192.168.10.1 63-d1-54-07-f5-f9

No comments:

Post a Comment