In this recipe, we are not going to be directly assaulting the wireless network, but manipulating something that is present in the networks to carry out actions, such as sniffing or man-in-the-middle attacks. The technique we're exploring here is something known as ARP cache poisoning, and is something that can be used on any network that is using the TCP/IP protocol.
So what is ARP? Well ARP, or address resolution protocol, is a component of the TCP/IP protocol that is used to link a logical addresses or IP addresses to a physical address or MAC address. In practice, the following is what happens with ARP.
Let's imagine a situation where you have two clients that are on the same subnet who wish to initiate communication with one another. In this situation, an IP address is not needed in the normal sense because there are no routing requirements present...