search

alandau / arpspoof

A simple ARP spoofer for Windows
318 stars 67 forks source link

Is it possible to run without installing Wireshark? #16

Closed ryaquaza closed 3 years ago

ryaquaza commented 3 years ago

Hello, I want to ask is there a way to run arpspoof without having to install Wirehark? For example just add .lib or dll file to generated .exe folder?

alandau commented 3 years ago

A kernel driver (WinPcap or Npcap) has to be installed for arpspoof to run. The library arpspoof uses to talk to the driver is already statically linked into the .exe so no further DLLs are required.

Wireshark is not required per se, but it's a convenient way to install the driver. However, you can install the driver directly without Wireshark: https://nmap.org/npcap/#download.

ryaquaza commented 3 years ago

Many thanks for your answer. I want to ask that instead of installing the kernel driver, can I directly add WinPcap include, WinPcap library(I found it in NpcapSDK) to the source code to compile or not?

alandau commented 3 years ago

No, it's not instead, it's in addition. The pcap library from the SDK is already included in the .exe, but you also need the driver, which is separate and has to be installed.

ryaquaza commented 3 years ago

Thanks for your help.