DHCP
DHCP Starvation
Attacker will flood the network with dhcp requests (different mac addresses) and the dhcp server will assign ips to the attacker and consume all the dhcp pool. After that, attacker launches its own rogue dhcp server.
Tools for Attack
Yersinia
CLI and GUI based.