search

SySS-Research / Seth

Perform a MitM attack and extract clear text credentials from RDP connections
MIT License
1.38k stars 325 forks source link

Subnet question #38

Closed bucky67gto closed 5 years ago

bucky67gto commented 5 years ago

will this work against a different subnet: ie.

attacker IP 10.10.5.23 victim IP 10.10.110.65

Thanks

AdrianVollmer commented 5 years ago

You didn't give the netmask, but I assume you're talking about /24 nets. Then no, it won't, because it uses arp spoofing. See https://en.wikipedia.org/wiki/ARP_spoofing

bucky67gto commented 5 years ago

Adrian,

My mistake. I meant outside the subnet. Gave a vary poor example. More like a larger subnet like a /22 or similar.

thanks

AdrianVollmer commented 5 years ago

Still not sure what you mean. But you need to be in the same subnet as the victim. If you're not, it won't work.