Rogue DHCP Server

An attacker plugs a rogue DHCP server into the network. When a client broadcasts DHCP Discover, both the legitimate server and the rogue respond. Whichever Offer arrives first wins - and a rogue server can respond faster, handing the client a malicious default gateway and DNS server to perform man-in-the-middle attacks.

Ready Click Next Step to see how a rogue DHCP server hijacks client network configuration.

Client Network Config

IP Address(none)

Gateway(none)

DNS Server(none)

DHCP Server(none)

DHCP Offer Race

Message -

Winner -

Offered GW -

Event Log