With Robin Wood, master of hardware based Man-in-the-Middle tools, in studio Darren decides to give the traditional ARP poisoning method some love. White-hat love that is. Your typical ARP Poisoning Man-in-the-Middle attack which can be easily performed using tools such as ettercap, arpspoof, or even Cain & Abel on Windows. Generally speaking the goal is to convince the victim, using spoofed ARP packets, that your MAC address is associated with the IP address of another machine on the network -- typically the router or gateway.

Of course in the real world the MAC address of your router doesn't happen to change very often, so if it does it's a tell-tale sign that something weird is happening. In this segment we demo Irongeek's ARPWatch-like tool for Windows, DecaffeinatID. On the Linux side check out arpwatch.