ARPoLAN: Network Monitoring and Security Tool

Arduino IDE

Arduino Micro

W5500 mini Ethernet module

<html><body><p> </p><figure><iframe src="https://youtu.be/AeQCA1TQ-Sk"></iframe></figure><p> </p><h3>About the Project</h3><p>Welcome back, tech enthusiasts! Today, I'm excited to introduce ARPoLan, a project that started as an experiment to explore the potential of combining the Arduino Pro Micro and the W5500 Ethernet module. This powerful device can perform network scanning, ARP spoofing, and even act as a local Rubber Ducky. Let me take you through building and testing this network security tool. </p><p> </p><p>‎ </p><h3>Features &amp; Components</h3><p>ARPoLan combines several powerful components to deliver its impressive capabilities: </p><p> </p><ol><li>Network Scanning: Discover devices on the local network by sending ARP requests and collecting responses. </li></ol><ol><li>ARP Spoofing: Perform ARP spoofing attacks to intercept and manipulate network traffic. </li></ol><ol><li>HID Functionality: Utilize the Atmega32u4's USB HID capabilities for additional attack vectors. </li></ol><ol><li>Real-time Monitoring: Visual and serial indicators for attack detection and network activity. </li></ol><p>‎ </p><h3>Getting Started</h3><p>I designed the PCB for ARPoLan using Altium Designer, creating a simple yet efficient two-layer layout. Here’s a breakdown of the components used: </p><p> </p><figure><img src="https://projects.arduinocontent.cc/88d1456c-cb9c-4a24-8b67-44c7d5ea7dc9.jpg"/><figcaption></figcaption></figure><p> </p><ol><li>Atmega32u4 Microcontroller: Handles USB communication and processing tasks. </li><li>W5500 Ethernet Module: Provides reliable network connectivity with an integrated hardware TCP/IP stack. </li><li>25 MHz Crystal Oscillator: Ensures precise timing for network operations. </li><li>RJ45 Ethernet Socket: Facilitates network connections with integrated status LEDs. </li><li>LM1117 Voltage Regulator: Supplies a stable 3.3V power to the W5500. </li><li>USB A Port: Allows for easy programming and data transfer. </li><li>Passive Components: Capacitors and resistors for power stabilization and signal integrity. </li></ol><p>The communication between the W5500 and the Atmega32u4 is handled via the SPI protocol, ensuring quick and reliable data transfer. </p><p> </p><p>‎ </p><h3>Schematic</h3><p>The PCB for ARPoLan was designed using Altium Designer, featuring a two-layer layout optimized for compactness and efficiency. The board integrates all necessary components, ensuring reliable connections between the Atmega32u4 and the W5500. </p><p> </p><figure><img src="https://projects.arduinocontent.cc/0b6d0eeb-6a94-4fd1-9568-654934207c4a.png"/><figcaption></figcaption></figure><p> </p><h3>Connection Table</h3><li>Ensure the VCC pin of the W5500 is connected to a 3.3V power supply, as the module operates at 3.3V logic levels. </li><ol><li>The SS (Slave Select) pin can be connected to any digital pin on the Arduino Pro Micro, but it must be defined correctly in the code. </li><li>Make sure the GND of the Arduino Pro Micro is connected to the GND of the W5500 module to ensure a common ground. </li><li>This setup will enable SPI communication between the Arduino Pro Micro and the W5500 Ethernet module. </li></ol><p> </p><figure><img src="https://projects.arduinocontent.cc/519e6eda-d64e-4e1a-a08e-b4eff9fc6ea5.jpg"/><figcaption></figcaption></figure><p> </p><p>‎ </p><h3>Usage</h3><p>First Code: Local Rubber Ducky The first piece of code transforms ARPoLan into a local Rubber Ducky. The Atmega32u4's USB HID capabilities allow it to act like a keyboard or mouse, injecting pre-programmed keystrokes into a connected computer. This was a fun experiment, though I refer to it as the "bad idea" code due to its potential risks. </p><p> </p><p>Second Code: ARP Spoofing Next, I tested the ARP spoofing code. This script injects malicious ARP packets into the network, leveraging the processing power of the Atmega32u4 and the network capabilities of the W5500. While not overly powerful, it demonstrated the device's potential for network security tasks. </p><p> </p><p>Third Code: Network Scanning The final code was for network scanning. By sending ARP requests to all IP addresses within a specified range, ARPoLan could identify active devices on the network. This functionality is crucial for network monitoring and penetration testing. </p><p> </p><p>‎ </p><h3>Code &amp; PCB</h3><p>If you're interested in building this project, the code and schematic are available on GitHub. Simply visit the GitHub repository to download the necessary files. If the project gains attention, I’ll open-source the PCB files as well. Feel free to test the code and share your feedback or improvements. </p><p> </p><p>GitHub repository: github.com/cifertech/arpolan </p><p> </p><figure><img src="https://projects.arduinocontent.cc/8547968a-7461-406c-9ee1-b6951c0422b1.jpg"/><figcaption></figcaption></figure><p> </p><h3>Conclusion</h3><p>Creating ARPoLan was a fascinating journey into network security and hardware integration. From designing the PCB to writing and testing the code, this project showcased the potential of combining simple yet powerful components to achieve sophisticated functionalities. Stay tuned for future updates and enhancements, and don’t forget to check out the project details on my GitHub. If you have any ideas or suggestions, I would love to hear them! </p><p> </p></body></html>

ARPoLAN: Network Monitoring and Security Tool

A tool for network scanning and ARP spoofing using the Atmega32u4 and W5500