swisskyrepo
/
InternalAllTheThings
mirror of https://github.com/swisskyrepo/InternalAllTheThings.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: swisskyrepo:dc56ab9cf9c3387caeec7596146d3ae1c4159988
Branches Tags
swisskyrepo:gh-pages
swisskyrepo:main
...
compare: swisskyrepo:07c7cc384c1e2adafd1a69062b7968e9cbde1449
Branches Tags
swisskyrepo:gh-pages
swisskyrepo:main

2 Commits
dc56ab9cf9 ... 07c7cc384c

Author SHA1 Message Date
DoI 07c7cc384c
Merge cc02896bd8 into 8c4d5ad3ae 2024-09-23 22:16:48 -04:00
DoI cc02896bd8
Update network-discovery.md 
Add nmap arp scan and listing current entries in the arp table.
 2024-08-19 16:08:32 +12:00
1 changed files with 17 additions and 2 deletions
Show Stats Expand all files Collapse all files

19
docs/cheatsheets/network-discovery.md
View File

@ -54,12 +54,27 @@ MDNS works by using multicast addresses to send DNS queries and responses. When
mdns-scan
```
## ARP
ARP (Address Resolution Protocol) is a networking protocol used to map IP addresses to MAC (Media Access Control) addresses on a local area network (LAN).
* ARP scan
* ARP neighbors
```ps1
:~$ ip neigh
192.168.122.1 dev enp1s0 lladdr 52:54:00:ff:0a:2c STALE
192.168.122.98 dev enp1s0 lladdr 52:54:00:ff:aa:bb STALE
```
* ARP scan with `nmap` - note, needs root privileges. Check what packets nmap is sending with `--packet-trace`
```ps1
:~# nmap -sn -n 192.168.122.0/24
Starting Nmap 7.93 ( https://nmap.org )
Nmap scan report for 192.168.122.1
Host is up (0.00032s latency).
MAC Address: 52:54:00:FF:0A:2C (QEMU virtual NIC)
```
* ARP scan with `arp-scan`
```ps1
root@kali:~# arp-scan -l
Interface: eth0, datalink type: EN10MB (Ethernet)