Scutum is an ARP firewall that prevents your computer from being arp spoofed. Scutum controls “arptables” in your computer so it accepts ARP packets only from the gateway. This way, when people with malicious intentions cannot spoof your arp table. Scutum also prevents other people from detecting your device on LAN if scutum is used with properly configured TCP/UDP firewall.
SCUTUM working flow:
– postconnect
1. Connect to wifi
2. Accept all ARP packets
3. Cache gateway MAC address by establishing a socket connection with a timeout of 0
4. Add Gateway MAC to exception
5. DROP all ARP packets
6.Finished
– postdisconnect
1. Accept all ARP packets
Usage & Installation:
git clone https://github.com/K4YT3X/SCUTUM.git && cd SCUTUM pip3 install avalon_framework sudo python3 scutum.py --install sudo scutum
Source: https://github.com/K4YT3X/