#arppoison

Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials (e.g. Windows Active Directory passwords) from users. It’s designed to detect the use of hacking tools such as Responder, Inveigh, NBNSpoof, and Metasploit’s LLMNR, NBNS, and mDNS spoofers, whilst avoiding false positives. This can allow a Blue Team to quickly detect and isolate attackers on their network. It takes advantage of the Windows event log to quickly integrate with an Active Directory network, or its output can be piped to a log for other systems.

arp-validator is an javascript Security Tool to detect arp poisoning attacks. Features: – Uses a faster approach in detection of arp poisoning attacks compared to passive approaches – Stores validated host for speed improvements – Works as a daemon process without interfering with normal traffic – Log’s to any external file