Skip to content

Commit dc43680

Browse files
committed
doc for arp_sweep aux scanner discovery mod rapid7#8296
1 parent 126c078 commit dc43680

File tree

1 file changed

+45
-0
lines changed
  • documentation/modules/auxiliary/scanner/discovery

1 file changed

+45
-0
lines changed
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
## Vulnerable Application
2+
3+
ARP (the Address Resolution Protocol) is a companion protocol to IPv4.
4+
Its purpose is to resolve internet layer addresses (as IPv4) of stations
5+
on the local network to their corresponding link layer addresses
6+
(for example, Ethernet).
7+
8+
(As a side note, in IPv6 this task is assolved by the Neighbour Discovery
9+
protocol.)
10+
11+
The discovery is limited to the broadcast domain of the local network;
12+
so you cannot discover hosts that aren't directly connected to your LAN.
13+
14+
## Target Devices
15+
16+
All the devices on a network should reply to ARP requests for communication
17+
and duplicate address detection, so usually every device should be
18+
discoverable.
19+
20+
## Verification Steps
21+
22+
Here we suppose the local network is 192.168.0.0/24:
23+
24+
1. Start msfconsole
25+
2. Do `use auxiliary/scanner/discovery/arp_sweep`
26+
3. Set the RHOSTS according to your local network. For example, on a
27+
192.168.0.0/24 network:
28+
`set rhosts 192.168.0.0/24`
29+
4. Do `run`
30+
31+
## Scenarios
32+
33+
An example output on a home network:
34+
```
35+
msf > use auxiliary/scanner/discovery/arp_sweep
36+
msf auxiliary(arp_sweep) > set RHOSTS 192.168.0.0/24
37+
RHOSTS => 192.168.0.0/24
38+
msf auxiliary(arp_sweep) > run
39+
40+
[*] 192.168.0.1 appears to be up (D-Link International).
41+
[*] 192.168.0.2 appears to be up (UNKNOWN).
42+
[*] 192.168.0.4 appears to be up (ASUSTek COMPUTER INC.).
43+
[*] Scanned 256 of 256 hosts (100% complete)
44+
[*] Auxiliary module execution completed
45+
```

0 commit comments

Comments
 (0)