ARP Spoof & MITM
network · medium · +45 XP
Target
GET /api/lab/arp-mitm-101/network (list hosts + ARP cache state)
POST /api/lab/arp-mitm-101/arp-spoof body {victim, target, attacker_mac} (forge ARP reply)
GET /api/lab/arp-mitm-101/sniff?victim=... (returns captured traffic when MITM is active)
Goal: poison the victim's ARP entry for the gateway so its IP→MAC maps to your MAC. Once the cache is poisoned, /sniff returns the next HTTP request the victim sends — including the Authorization header. The bearer token is the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/arp-mitm-101/
// reuse on the cli
// submit flag
| # | hacker | solved |
|---|---|---|
| 1 | @akadee380 first blood | 2026-09-21 |
3 of 12 · network