saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 08:30:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/performing-arp-spoofing-attack-simulation/references/api-reference.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

2.5 KiB
Raw Blame History

API Reference: Performing ARP Spoofing Attack Simulation

Scapy Library (Core)

Function/Class Description
ARP(op="is-at", psrc=ip, hwsrc=mac) Construct ARP reply (poison) packet
Ether(dst=mac) Construct Ethernet frame with target MAC
srp(packet, timeout, iface) Send and receive layer 2 packets (ARP resolution)
sendp(packet, iface) Send packet at layer 2 without waiting for reply
get_if_hwaddr(iface) Get MAC address of local interface
get_if_list() List available network interfaces
conf.iface Get/set default network interface

ARP Packet Fields

Field Description
op Operation: "who-has" (request) or "is-at" (reply)
psrc Source protocol (IP) address
pdst Destination protocol (IP) address
hwsrc Source hardware (MAC) address
hwdst Destination hardware (MAC) address

Detection Verification Commands

Command Platform Description
show ip arp inspection statistics Cisco IOS DAI statistics and violations
show ip arp inspection log Cisco IOS DAI violation log entries
arpwatch -i eth0 Linux Monitor ARP table changes
ip neigh show Linux Display current ARP cache

Key Libraries

  • scapy (pip install scapy): Packet crafting and network interaction
  • netifaces: Cross-platform network interface information
  • nmap (python-nmap): Network host discovery as alternative to ARP scan

Configuration

Variable Description
Interface Network interface on same VLAN as target (e.g., eth0)
Root/Admin Scapy requires root/administrator privileges for raw sockets

Safety Controls

Control Purpose
Written authorization Legal requirement before any ARP spoofing
restore_arp() Always restore legitimate ARP entries after simulation
Packet count limit Limit spoofing rounds to minimum needed for detection test
Isolated VLAN Run simulation on isolated test network segment

References