https://souljian.cn/tags/mitm/Recent content in MITM on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088229/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088229/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>ARP 欺骗测试只在授权网络环境进行。</p> <h2 id="一arp-协议">一、ARP 协议 </h2><img src="https://souljian.cn/img/arp-spoofing.svg" alt="ARP 协议" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">① IP → MAC 解析 → ② ARP 表维护 → ③ 通信 </span></span></code></pre></td></tr></table> </div> </div><h2 id="二arp-欺骗">二、ARP 欺骗 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># arpspoof</span> </span></span><span class="line"><span class="cl">arpspoof -t target -r gateway </span></span></code></pre></td></tr></table> </div> </div><h2 id="三防御加固">三、防御加固 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">静态 ARP 表 · ARPWatch · 端口安全 </span></span><span class="line"><span class="cl">802.1x 认证 · 网络分段 </span></span></code></pre></td></tr></table> </div> </div><h2 id="四小结">四、小结 </h2><p>ARP 欺骗是局域网攻击的核心技术。<strong>静态 ARP + 802.1x</strong> 是防御核心。</p>