TechKnowSurge
CompTIA Security+ 2.4
TechKnowSurge Catalog Interactives Which Spoof Is in Play?
InteractiveSecurityFree

Which Spoof Is in Play?

Traffic is going to the wrong place. Which spoof is behind it?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

What you are doing: deciding which spoofing technique is behind a symptom a defender found. All three send traffic somewhere it should not go, and each spoofs a different thing. ARP cache poisoning lies about which network card owns an address on the local network, often with replies nobody asked for, so the settings are right but delivery is wrong. A rogue DHCP server answers new clients first and hands out its own settings: a gateway or name server it controls, or addresses that do not work. DNS cache poisoning lies about which address a name belongs to, in a resolver's cache or a machine's hosts file. How to use it: ask what was falsified. The owner of an address, the settings a client was given, or the answer to a name?

What you'll learn

Aligned to

CompTIA Security+
2.4 Given a scenario, analyze indicators of malicious activity.

Key terms

Spoofing
An attack where an adversary impersonates a trusted entity by falsifying data such as an IP address or email address.
ARP Cache Poisoning
A sub-technique of adversary-in-the-middle attacks where an attacker sends forged ARP messages to link their MAC address with a legitimate IP address, redirecting traffic through the attacker.
Rogue DHCP Server
An unauthorized DHCP server connected to a network that assigns invalid IP configuration to clients, causing a denial-of-service condition or enabling adversary-in-the-middle attacks.
DNS Poisoning
An attack that corrupts the DNS cache to redirect users to malicious websites.
Gratuitous ARP
An unsolicited ARP reply sent by a device to update the ARP caches of other devices on the network without a prior request.

Topics

Spoofing Arp Cache Poisoning Rogue Dhcp Server Dns Poisoning Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →