ARP Spoofing inside VMWare?

[jpm11]

Does ARP spoofing inside VMWare work?

I figure even in the bridged mode your ethernet adapter inside VMWare is a virtual adapter with its own virtual MAC. So when you arpspoof it'll just say "the gateway is at this virtual MAC" which would be useless.

or am I missing something?

[Archangel-Amael]

Does ARP spoofing inside VMWare work?

Did you try it ?
Let us know when you have and what the results are.

[imported_BaconZombie]

It works under VMWare workstation but under ESX / ESXi there is an option to drop all packets either command or send with a faked MAC {if mac does not match the one listed in the vmware config file}

[BadKarmaPR]

uder ESX you can just run this commands from the console

vmware-vim-cmd hostsvc/net/vswitch_setpolicy --securepolicy-macchange=false <vswitch name>
vmware-vim-cmd hostsvc/net/vswitch_setpolicy --securepolicy-forgedxmit=false <vswitch name>
vmware-vim-cmd hostsvc/net/vswitch_setpolicy --securepolicy-promisc=false <vswitch name>

do this only in lab since it is dangerous in production.

for ESXi you will have to do it from the VIC by selecting the host then in the configuration tab select networking, then the vSwitch where the VM's are in its properties change the policy settings.

[jpm11]

what about in Fusion? That's what I have.

[BadKarmaPR]

this should work in fusion on OSX
http://kb.vmware.com/selfservice/mic...externalId=287