A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

0
votes
0answers
33 views

Does public key auth in SSH prevent most MITM attacks?

I found this article that claims asymmetric crypto signature of DH-obtained key prevents MITM: http://www.gremwell.com/ssh-mitm-public-key-authentication Key idea: The value of 'signature' is a ...
0
votes
1answer
163 views

Why is stackoverflow not using HTTPS for all it's page?

Most webpage from stackoverflow use http even if you are logged in. Isn't it a security issue? Could an eavesdropper steal my session and authentication cookie then impersonate me since it's sent ...
1
vote
1answer
121 views

What is stopping me from replaying an SSL certificate?

Say I have the SSL certificate for google.com. I intercept it, edit the certificate with my own domain name and public key and use it to intercept all traffic to google.com. What mechanisms exist in ...
0
votes
0answers
57 views

How can one detect a stingray or other phone interceptor in use?

There have been many news articles with very few details regarding stingrays and other phone interception tools, so I do not expect a full answer any time soon, however I would like to perhaps gather ...
0
votes
1answer
300 views

Can eavesdropping be facilitated by injecting content that will be transmitted?

I was asked during a job interview the following question, to which I couldn't find an answer then, and this thing is still bothering me. I was hoping someone might know the answer here: Consider ...
2
votes
2answers
130 views

How to avoid session fixation (Login CSRF) by MitM attack without HSTS?

I'm writing a web app that already uses TLS encrypted connections (HTTPS), Secure; HttpOnly session cookie, HMAC-SHA1 CSRF token, requires correct Referer header to avoid Login CSRF and changes ...
23
votes
3answers
3k views

For an HTTPS web application, is it worthwhile to encrypt the password before POSTing it, to keep a MITM attacker from harversting it?

Our application has recently gone through penetration testing. The test found one critical security breach, which is essentially: The problem: Attacker sets up a WiFi spot. User enters our site ...
2
votes
3answers
121 views

How real is the threat of MITM when you have your own network

I never understood why I have to worry about MITM when I am at home connected to my simple WiFiless modem using an Ethernet cable. I can tell how serious the threat is when you are in an Internet ...
2
votes
3answers
156 views

What's the difference between mitm attack and sniffing?

What's the difference between MITM attack and sniffing? Also could anyone name a few other attacks similar to those?
0
votes
1answer
61 views

Unencrypted connections between 2 people who use the same ISP, what's the risk?

What is the risk, man-in-the-middle or otherwise, of unencrypted connections between 2 people who use the same ISP, in the same city? If we assume the ISP (and the copper wire that leads to them) is ...
1
vote
1answer
51 views

Diffie Hellman Hash MITM

I've seen an application recently that used the Diffie Hellman algorithm. It is not a Ephemeral Diffie-Hellman implementation, but rather a Diffie Hellman one. After the secret keys have been ...
1
vote
0answers
43 views

Deauth attack without being able to contact the AP

In my home pentest lab I though it would be interesting to try this scenario and see if it works: I have 2 computers and 1 AP, computer A is authenticated to the access point with WPA2 and computer B ...
1
vote
1answer
52 views

Could I counter SiteKey MitM attack with user-agent identification?

I find it very strange that bank use service like SiteKey without user-agent identification. This still makes them very vulnerable to MitM attack which is exactly what they are trying to protect ...
2
votes
1answer
52 views

API request modification

I am building an API that returns data about companies Multiple applications will access the API, some of these applications will have access to one company, some to multiple companies. When a request ...
2
votes
3answers
64 views

Flash cookie and man-in-the-middle

I am using the Scala Play web framework. In it, there is a PLAY_FLASH cookie used to flash messages to the user (it's a cookie so it will still work after several redirects). I put HTML in the cookie ...
3
votes
2answers
269 views

How to simulate man in the middle attack in android emulator?

I am new to pen-testing. Yesterday i analysed one android application using dex2jar application and i saw an android application implemented https connection using empty trust manager. class miTM ...
4
votes
4answers
259 views

Mitigating SSLStrip by only serving a site over HTTPS?

So I just learned about SSLStrip now--I feel like I'm so late to the game. What I want to know is: If your site only serves content over HTTPS and hard fails on HTTP requests, with no redirect, are ...
0
votes
2answers
74 views

Installing self-made cert as trusted CA on windows?

I'm looking into using mitm-proxy, but part of the process of filtering/snooping SSL is that you must generate and install a root cert as a trusted CA, so that mitm-proxy can generate and throw out ...
1
vote
2answers
115 views

How to know if I'm under a MITM attack

If I am connected in a public WIFI , is there any way to know whether I am under attack or not while browsing sites using SSL. For example if I visit facebook.com , if the URL starts with "https://" ...
0
votes
1answer
71 views

Hacked Router Faking a Certificate Authority

Does a typical computer begin with any shared secret with a certificate authority when I buy it? If not, a compromised home router could fake everything and get my credit card info when I attempt to ...
2
votes
3answers
92 views

How can DH provide a known secret to two parties over an unencrypted connection without it being intercepted via MITM?

Without using Private and Public keypairs, i do not understand how Diffie-Hellman is able to generate a secret key between two parties on the internet without passing something between that could be ...
1
vote
2answers
128 views

Can ISP use MITM attack to “break” encrypted traffic?

Use connection of A and B as an example. Their communications were encrypted by Public Key Encryption. Before they exchange their public key, ISP MITM attacked. A got "B"'s public key (ISP generated) ...
-1
votes
1answer
123 views

Man-in-the-middle attack with public wifi

I'm using Charles to sniff out the traffic on my iPhone at Starbucks and for some reason it won't work with at&t wifi. Google Starbucks wifi does, however. I use my iPhone to connect to the same ...
0
votes
1answer
333 views

SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?

This is a Nessus finding, which is considered medium by default. Basically it may allow for some plaintext injection which may allow for some man in the middling. My question is, has these been ...
2
votes
1answer
43 views

Inconsistant browser warnings for SSL

I am doing a penetration test at the moment, where the client has deep packet inspection for SSL enabled (my guess), as every SSL connection seems to being MITMed. Now, some HTTPS sites, like Gmail, ...
0
votes
2answers
92 views

Broadband security question

I have a fixed line broadband connection at home. This morning when I tried accessing Google or Facebook through my browser (Google Chrome) I got a webpage asking me to update my flash player. I found ...
2
votes
5answers
428 views

Does the SSL termination happen with the ISP or a mobile service provider? [duplicate]

Is it true that when I connect to a site over HTTPS , my mobile service provider or the ISP gets to snoop in the communication? Can they play MITM?
1
vote
1answer
34 views

series of SSL errors across multiple sites — reason for concern? [closed]

Rebooted my rMBP late 2013 recently, and saw a set of SSL errors (unable to verify certificate) across a wide range of sites (google, gmail, mubi, medium) and also in the Calendar app as it tried to ...
67
votes
5answers
6k views

How can my employer be a man-in-the-middle when I connect to Gmail? [duplicate]

I'm trying to understand SSL/TLS. What follows are a description of a scenario and a few assumptions which I hope you can confirm or refute. Question How can my employer be a man-in-the-middle when ...
1
vote
1answer
28 views

What are the security issues of a MITM on an ssh session with rsa keypair

If a user connects to an SSH server using an rsa private key, but does not confirm the server's fingerprint. What kind of information can a man in the middle attack get from the session?
1
vote
0answers
25 views

How does OTR's authentication using “Question and answer” protect against MiTM?

I've read that the answer has something to do Socialist Millionaire, but I still don't understand how can the user be protected against malicious Man In The Middle, which would capture the question ...
0
votes
1answer
44 views

MITM protection, key distribution

I want to make sure each of my apps users only get their own data, and that nobody tampers with it or sniffs it in a MITM fashion. Encryption of everything should be the solution, right? But how do I ...
0
votes
1answer
59 views

Implementing MITM attack on MAN or WAN

Is it possible to implement MITM attack on larger networks than LAN? For example is is possible to implement such an attack on the whole network of an ISP?
0
votes
2answers
67 views

What are the alternatives to ECDSA for an authentication protocol?

In an authentication protocol, S has a public/private key pair known to C, and S and C have established a secure channel (for example, using DH or ECDH, or any other key exchange protocol). C wishes ...
1
vote
1answer
98 views

How common are mitm attacks behind an ISP?

Yes. Of course using https everywhere is best. But sometimes that's not an option. In those cases, I'd like to make an informed decision. Is there any information about their prevalence? Or would that ...
0
votes
1answer
47 views

MITM attack in a star network with proxy server

My community centre has a public computer center. I am pretty sure that it's connected in a star topology with some switch in the center. It also have a proxy server which we need to enter a username ...
1
vote
1answer
64 views

Is code-signing with a non-ssl timestamp unsafe?

Assuming your code-signing tool is secure (e.g., does not suffer from buffer overflow exploits and the like), is there any reason to be concerned if a time-stamping service is not running over SSL? ...
3
votes
1answer
373 views

How can the OpenSSL CCS Injection vulnerability (CVE-2014-0224) be exploited?

Just curious how this one works in practice and if it's as much of a risk as has been made out? It says you actively require a MiTM scenario, which is understandable, but then what are the steps to ...
-2
votes
1answer
55 views

Prevent Replay attacks via timestamp while client clock is not adjusted [closed]

I'm going to send my timestamp to server and server will check if it is in a given interval. What if My mobile clock is not adjusted (say it gives 2:00 pm while now it is 2:00 am). now I lost the ...
5
votes
1answer
228 views

Can an SSH server fingerprint be spoofed?

If I simply connect to an SSH server, get its key fingerprint, and immediately disconnect, does the SSH protocol ensure that the server also had the private key in order to get that far into the ...
1
vote
2answers
72 views

Are MITM attacks possible on HTTP loopbacks?

I have a web server running at example.com. The web server performs a server-side request to example.com which results in a loopback, so the request never passes over the network. Is this request ...
1
vote
2answers
67 views

Security risk of Microsoft AD Certificate Services?

We have an internal CA server for our domain located at http://cert_srvr.local.domain/certsrv/certrqxt.asp. This server runs Microsoft Active Directory Certificate Services. When I went to the ...
1
vote
3answers
126 views

Is it secure to be using LDAP, or is LDAPS the only secure option?

I am currently using an LDAP setup. I am wondering if it is secure from Man-in-the-middle attacks or other vulnerabilities?
2
votes
3answers
86 views

How are public key certificates updated securely?

Let's say I get a new computer that's never been connected to the internet before. The first time I connect it to the internet, is it susceptible to a mitm attack while downloading its public key ...
10
votes
2answers
451 views

SSH connection attempts from China show different key; is China doing a MITM attack on SSH traffic?

I have a server located in the USA and SSH to it from various places around the world. When I SSH in from a computer I have never used before, I'll see something like this: The authenticity of host ...
0
votes
2answers
42 views

Manipulating data during a MiTM

I'm trying to learn some attack methods by myself and I have hit a wall where I can't find any information. I have successfully performed an ARP MiTM between 2 systems and I am able to sniff the ...
0
votes
1answer
114 views

SSL decryption without installing a certificate on each client

Given a proxy performing MITM SSL decryption and inspection, is it possible to install a wildcard certificate (*.domain.com) on the proxy signed by a root CA (such as VeriSign or GoDaddy) such that ...
0
votes
2answers
155 views

How common and how easy is sniffing plaintext communication?

So the first reason we give to encrypt content is to prevent against a man in the middle sniffing all data. That is the reason ssh is used and not telnet for example. But in today's networks where ...
0
votes
3answers
67 views

man in the middle question

I've been wondering about this scenario for a while but I cannot fully understand how it works. Say I am sitting in a cafe on my laptop with wireshark, the cafe has an open WiFi connection. Is it ...
1
vote
1answer
93 views

What can entreprise admins do with our secured sessions?

The enterprise where I work has a proxy server that traces and filters our web activities. Employees claim that they can know the links that we visited and see the content of HTTP web sites, but they ...