# ARP Spoofing Defense Missing

> Detects network configurations and code patterns that are vulnerable to ARP spoofing attacks.

- Skill: `zakirkun/arp-spoofing-defense-missing` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/arp-spoofing-defense-missing`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/arp-spoofing-defense-missing/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/arp-spoofing-defense-missing

---


# ARP Spoofing Defense Missing

## Overview
ARP spoofing allows an attacker on the same network segment to intercept traffic by poisoning ARP caches, causing victims to send traffic to the attacker instead of the gateway. This enables:
- MITM attacks on HTTP traffic
- Credential theft on cleartext protocols
- Session hijacking

Code that sends sensitive data without verifying end-to-end integrity (TLS, signatures) is vulnerable if ARP spoofing occurs.

## Remediation
- Use TLS for all sensitive communication (prevents data theft even with MITM)
- Configure static ARP entries for critical servers
- Enable dynamic ARP inspection on managed switches
- Use VPN for all inter-server communication on shared networks