An on-path attack (previously known as MITM - Man-in-the-Middle) allows an attacker to intercept and modify communication between two parties.
ARP poisoning (Option B):
Attackers send fake ARP replies to associate their MAC address with the IP address of a legitimate device (e.g., gateway).
This forces traffic to flow through the attacker's system, enabling packet capture and manipulation.
Tools like Ettercap, Bettercap, and ARP spoofing scripts are commonly used.
Reference:
Incorrect options:
Option A (DNS spoofing): Redirects users to malicious domains but does not intercept traffic.
Option C (VLAN hopping): Allows traffic to traverse VLANs, but does not intercept user communication.
Option D (SYN flooding): A DoS attack that overwhelms a target with half-open connections, but does not intercept traffic.