Ettercap

Description

Ettercap is a comprehensive suite for man-in-the-middle attacks on LAN, featuring sniffing of live connections, content filtering on the fly, and active/passive protocol dissection. It supports ARP poisoning, DNS spoofing, and DHCP spoofing with plugin extensibility.

Use Cases

• Perform ARP spoofing to intercept LAN traffic
• Test network segmentation and MITM defenses
• Capture credentials transmitted over unencrypted protocols

Attack Phases

MITRE ATT&CK Techniques (3)