About Anti Netcut
Anti Netcut 3.0 is software which protects your computer connection from ARP poisoning and ARP spoofing attacks while working on shared computer networks. This download is licensed as freeware for the Windows (32-bit and 64-bit) operating system/platform without restrictions. Anti Netcut is available to all software users as a free download for Windows.
Is Anti Netcut safe to download?Our software library provides Anti NetCut 3 3.0 that can be downloaded for free. Based on the users’ reviews, the considerable plus of it is it is easy to install, however, some people think that it features such a disadvantage as it displays pop-up ads.
- ซึ่งเพื่อนๆนั้นสามารถดาวน์โหลดโปรแกรม Anti Netcut 3 ได้จากด้านล่างเลยครับ. ดาวน์โหลด Anti Netcut 3.
- Anti Netcut 3.0. Log who is cutting your connection. Protects your online privacy Anti Netcut is software which protects your computer connection from ARP poisoning. License: Freeware.
We tested the file AntiNetCut3-Win7.exe with 26 antivirus programs and it turned out 100% clean. It's good practice to test any downloads from the Internet with trustworthy antivirus software.
Does Anti Netcut work on my version of Windows?Older versions of Windows often have trouble running modern software and thus Anti Netcut may run into errors if you're running something like Windows XP. Conversely, much older software that hasn't been updated in years may run into errors while running on newer operating systems like Windows 10. You can always try running older programs in compatibility mode.
Officially supported operating systems include Windows 7, Windows Vista and Windows XP. As this software was designed for older versions of Windows, it may not run perfectly on Windows 10.
What versions of Anti Netcut are available?
The current version of Anti Netcut is 3.0 and is the latest version since we last checked. This is the full offline installer setup file for PC. At the moment, only the latest version is available.
Alternatives to Anti Netcut available for download
- NetcutUses pure ARP to detect IP/MAC address, and control/change MAC and network usage.
NetCut is a Denial of Service type of tool that runs on Windows and is capable of cutting off a person’s internet connectivity when both are connected in the same local area network. Basically the ARP protocol is used to translate IP addresses to MAC addresses and NetCut exploits the weakness in the stateless ARP protocol due to the lack of authentication.
NetCut is very easy to use and can be used by anyone. Simply run the tool and it will detect all the connected devices in the same local area network. You can then select any target from the list followed by clicking the “Cut off” button, and within seconds the target will lose its internet connection. The affected target will have no idea what’s happened even if he/she has a firewall program installed.
Due to the way NetCut works, no firewall is able to prevent nor even detect the attack. In fact setting up static ARP entries like most other websites suggested will not protect you against NetCut attacks because NetCut directly attacks the gateway and not the user. Here is an investigation on how NetCut works and also the method to protect against the DoS attack.
As we’ve mentioned earlier, none of the firewall software such as ZoneAlarm, Comodo, Outpost, GlassWire, SpyShelter, Privatefirewall, and etc is able to detect NetCut attack. However you can use XArp, which is a freeware tool that can detect ARP spoofing. By installing XArp and running it, you will be instantly notified when it detects an ARP spoofing attack including the attack from NetCut. The screenshot below shows a running XArp without attacks. Take note of the MAC address 00-21-5d-41-16-5a circled in red which is associated with the IP 192.168.2.8.
When NetCut starts attacking the IP 192.168.2.8 in an attempt to cut off the Internet connection, XArp immediately detects it and shows an alert popup with a few different messages. The most important message would be the one that reports that the MAC address for the IP 192.168.2.8 has been changed from 00-21-5d-41-16-5a to 03-27-75-49-18-73.
If you launch the XArp program from the notification tray icon, you will see that the MAC address for the IP 192.168.2.8 has been changed to 03-27-75-49-18-73 which is obviously wrong.
This means that NetCut sends a spoofed packet to inform the gateway that the IP 192.168.2.8 is associated with an incorrect MAC address. Since the IP 192.168.2.8 isn’t mapped to the correct MAC address, the Internet connection breaks as well. Even a packet sniffer such as Wireshark confirms that spoofed packets are sent to the gateway with a wrong MAC address mapped to the IP 192.168.2.8.
When NetCut is actively attacking a target on the network, it will continuously send spoofed packets to the gateway so that there is no chance for the gateway to obtain the correct dynamic ARP table. Here we have 5 possible ways of protecting against NetCut attacks.
1. Static ARP Table in Router
Since NetCut sends spoofed packets to the router to mess with the dynamic ARP table, you can solve this problem by setting up a static ARP table in the router. Implementing static ARP routing will protect everyone that is connected to the network. However this is not really a solution for everyone because a lot of basic home based routers don’t support static ARP table and it doesn’t make sense to implement this on a public WiFi. Doing this on a large corporate network also requires a lot of manpower maintaining the IP to MAC address mappings.
2. NetCut
Ironically, the NetCut program that is used to cut off a person’s Internet connection has an option to protect against the attack. Simply make sure that the “Protect My Computer” checkbox is ticked and this will ensure that your IP address is mapped to the correct MAC address.
Basically NetCut protects against its own attack by constantly sending packets to the gateway informing the router the correct mapping of the IP to MAC address. The router will be easily flooded with packets when NetCut is being used to attack and protect.
3. NetCut Defender
If you’re not comfortable in having an attack program such as NetCut installed and running on your computer due to legal concerns, the author of NetCut also created a protection program called NetCut Defender. Basically it does the same thing as the “Protect My Computer” option found in NetCut except without the ability to cut off a person’s connection.
Nowhere on the official NetCut Defender’s website does it mention that it costs $9.99. You will start getting nagging popups to purchase the program after a couple of hours of usage. We cannot confirm the trial usage of NetCut Defender as we have not tested it extensively but what we can confirm is that it can surely keep you safe against NetCut attacks.
4. Outpost Firewall Pro
When NetCut is launched, it will automatically run an ARP broadcast sweep to detect all connected devices on the network. For example, if the computer running NetCut is connected to a network 192.168.2.1 gateway, it will perform an ARP sweep from 192.168.2.1 to 192.168.2.255. Unlike ICMP ping that can be easily blocked, ARP requests are normally responded and not blocked. When a device responds to the ARP request made by NetCut, the device is added to the list that can be attacked. Outpost Firewall Pro has an option to block ARP scan.
Go to Settings > Advanced settings > Attack Detection > click the Customize button > select “Block host when it enumerates other computers on LAN” and click OK to close the Attack Detection window followed by clicking OK to save the Settings.
Enabling this option will prevent your computer from being listed in NetCut. The attacker will most likely attack another computer instead of yours. Outpost Firewall Pro is a shareware that cost $29.95 for a 1 year subscription on a single license.
5. ESET Smart Security
ESET Smart Security is one of the few internet security applications that can be configured to disallow responses to an ARP request. By doing this, NetCut won’t be able to find your computer during an ARP sweep when the program is launched or when the “Refresh Net” button is clicked. To configure ESET Smart Security to block an ARP scan, open the program, go to Setup and click on Network. Click Advanced Personal firewall setup that is located at the bottom.
Expand Network > Personal firewall and select IDS and advanced options. Uncheck “Allow response to ARP requests from outside the Trusted zone” and click OK.
For this setting to take effect, you need to select the “Public network” as the desired protection mode of your computer in the network. Normally this option would show up when you are connected to a new network. To check the settings, at the Network protection setup, click on “Change the protection mode of your computer in the network“.
Select Public network option and click OK.
The NetCut program won’t be able to find your computer on the network, thus keeping you safe from being attacked.
You might also like:
Hacking Knowledge – The Power of Spoofing MAC AddressHow to Use NetCut or TuxCut to Kill or Disrupt Internet Connection Hogger in Your Network10 Ways To Remotely Turn On Your Computer Using Wake-on-LAN4 Ways to Allow or Block Ping Response in Windows5 Ways to Create Fake Dummy File on USB Flash Drive to Enable Write Protect and Prevent ModificationI need some help my brother installed netcut on the computer and sometime uses it to cut off the wifi connection on my phone
So any idea how I can protect my phone from netcut.
android mobile also have “netcut” & also it have “defender” function, which mentioned above
ReplyThank you. Very helpful.
ReplyAha, this is useful. I noted that I already did a lot of the protection as I have an annoying router, BUT it happens to support some more advanced protection. Or so I THINK, ahahaha (until I get into more advanced pen testing to VERIFY somewhat).
Good luck.
Look into open source routers and the arptables package that should be possible to run on them, that kind of thing… Again, I’m not expert.
thnx a lot.
Replythx for it
ReplyThanks for the article.
I tried Netcut android version , i atacked my own pc but the atack could not affect the computer connection to the internet since i had the anti arp-spoofing enabled on Comodo Firewall.
Your android phone must be rooted to cut anyone ( even your pc )
Replythanks
ReplyThanks alot that was helpful
Anti Netcut Apk
ReplyBig Thanks
ReplyAnti Netcut Android
Discovered someone on my home wireless network is now using this tool. I need access to broadband for work, but cannot take any risks that the company computer is attacked, that data sent/received is compromised or that I lose connectivity. Should I start again and create a new network?
ReplyI Love this tutorial. Thanks a million!!
ReplyYou Are Awesome :)
I’ve used to use AntiArp on windows xp 32bit, but after upgrading my computer (Costed me 5000 EGP), I was unable to use AntiArp program anymore :(
but here you told me a marvelous methods to protect myself
thanks a lot.
Anti Netcut 3
Replyreally thank you for explaining briefly about net cut
Reply