joarleymoraes/net_guard: A command line tool to detect new unknown device in your network using ARP protocol

A command line tool to detect new unknown device in your network using ARP protocol. Maybe someone is hacking in your network! Alerts are sent via email.

Install

Mac

On Mac, install arp-scan:

brew install arp-scan

Configure mail on terminal, here's a tutorial on Gmail

Other Platforms:

TODO. PRs are welcome :)

Configure

Edit settings.cnf to set ALERT_EMAIL_ADD.

Add the Mac addresses of devices you know to whitelist.txt. You can list current connected devices using:

arp-scan --interface=<xx> --localnet

Usage

./net_guard.sh <interface>

E.g.: ./net_guard.sh en0

To list all network interfaces:

ifconfig


为您推荐了相关的技术文章:

  1. m0rtem/CloudFail
  2. Introducing Argo — A faster, more reliable, more secure Internet for everyone
  3. mdsecactivebreach/RDPInception: A proof of concept for the RDP Inception Attack
  4. Explore Hidden Networks With Double Pivoting
  5. A Red Teamer’s guide to pivoting

原文链接: github.com