Interface Blogs

I am in constant amazement in the pure speed in which the Cain & Abel suite of security threat analysis tools have been versioned. Even within the minor versions fantastic features to exploit the ways in which we implement access, authentication and mitm (man in the middle) attacks are integrated with flawless precision. Bravo!

In the 4.2 release the focus is on SMB (Server Message Block) mitm attacks. Previous utilities used to exploit the attack have been SMB Proxy and SMB Relay. In Cain both down level authentication and session reset operations are possible with ARP cache poisoning (aka ARP Poison Routing / APR) so switching is necessary. It (Cain) just keeps getting better and better as a framework to explore the ways these security threats are being exploited be the crackers and company. Be forewarned however... it may seem irresistible to install this suite but may be in direct violation with your organizations security policies and may be performing covert operations as well (remember SUB7). I use it on disposable systems only, non-production that never touches real networks (classroom, lab and test). And still I wait with bated breath for what the next release may bring...