Dev.to
7/6/2026

I did an ettercap MITM Home Lab
Short summary
Author completed a college-required MITM lab using ettercap and Wireshark to perform ARP poisoning and capture plaintext HTTP credentials. Initial Linux host-based attempts failed due to inbuilt security; redesigning with pfSense routing and VM victims succeeded. Covers ARP poisoning mechanics, credential sniffing vulnerabilities, and comprehensive remediation steps.
- •Built MITM attack lab for college penetration-testing course using ettercap and Wireshark
- •Discovered Linux host-based ARP poisoning blocked by security features; VM-based architecture succeeded
- •Documents credential sniffing techniques and provides defense remediation for individuals, admins, and website owners
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



