MITM/Wired/Network Tap

Setup

For a wired network tap, we need an attacking device with two network interfaces - one to connect to the sheep, one to connect to the network device.

A physical network tap can be as simple as a crossover cable connecting to the target computer. This is easier if the attacking computer is a router running OpenWRT or a Raspberry Pi or some other low form factor computer.

The Network Arrangement

The network will be arranged as follows:

[ Router ]-----[ Kronos (Attacker) ]------[ Mars (Sheep) ]

Usually the attacker has two ethernet ports, but in this case I'll be using one ethernet port and one wireless card:

[ Router ]  ~  ~  ~  ~   [ Kronos (Attacker) ]---------[ Mars (Sheep) ]

Connect to Target and Router

First step is to replicate the connection described above, either with wireless or wired connections.

Having a wired connection between the attacker and the sheep greatly simplifies the attack.

The attacking machine has an ethernet device connected to a crossover cable connected to the sheep:

kronos $ ifconfig eth0

It also has a wireless card,

kronos $ ifconfig wlan5

which is connected to a wireless network and to the internet. This is the connection the sheep will share.