Skip to content

mod_mitm

Authorized Use Only

Espilon is a security research and educational tool. Use it only on devices and networks you own or are explicitly authorized in writing to test.

ARP-poisoning man-in-the-middle module. It positions the agent between a target host and the gateway by poisoning both ARP caches, and restores them cleanly on stop. ESPM module (requires the arp_send syscall).

Commands

Command Arguments Description
arp_poison <target_ip> <gateway_ip> [interval_ms] Poison the target and gateway ARP caches so their traffic flows through the agent. interval_ms defaults to 2000.
arp_poison_stop Stop poisoning and restore the ARP caches.

Warning

ARP poisoning is disruptive to the target segment. Always stop it cleanly to restore normal routing, and only run it where you are authorized.

See also