Networking

Note Tcpdump is a network sniffing tool. Same as Wireshark but tcpdump is CLI based. ...

Requirements: Install tmac changer and angry ip scanner tool. Practical demo: Open up angry ip scanner , as well as open a command prompt and type ipconfig to see your ip address. Also check your mac address using the command getmac ![[Pasted image 20251102175926.png]] ![[Pasted image 20251102175942.png]] On angry ip set the ip address range as per your respective ip: ![[Pasted image 20251102180121.png]] Click on the ip column , and double click on mac address which will be on right side, and it will come to the left: ![[Pasted image 20251102175322.png]] Then start the scan. ![[Pasted image 20251102180250.png]] Identified one MAC address, Now we will spoof it, by typing the address inside tmac changer: ![[Pasted image 20251102180412.png]] Before and after MAC address of my device. Internet access will be unavailable for some time because the whole network interface will restart after the mac address change. You should be able to access someone else’s internet without giving their login credentials for a private network, and perform critical attacks using the MAC address , we may trick the SOC team. ![[Pasted image 20251102180455.png]] Tracert: tracing internet route We can trace our internet traffic route using the command tracert ![[Pasted image 20251102181159.png]] SAM file location: C:\Windows\System32\config\ ![[Pasted image 20251102181309.png]] ...