Recently, many friends and clients' servers have encountered ARP spoofing attacks, causing websites to be infected with malware. Since the attack uses ARP spoofing technology, the host itself is not compromised, and checking the webpage source code on the server shows no signs of malicious code. However, when accessing the website, all pages are infected with malware!
At first, I didn't know that this was the so-called ARP spoofing in networking terms. Later, after researching some materials, I learned that it indeed was ARP spoofing. To understand ARP spoofing, we need to start by understanding how ARP works.
Let's first review ARP. It was covered in the basics of computer networks in college. ARP stands for Address Resolution Protocol.