A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

8
votes
3answers
826 views

What stops someone from just redirecting a HTTPS connection to a HTTP version of the site?

Let's say someone does an ARP spoofing or DNS poisoning attack to redirect traffic to their own web server. If the real site has an SSL/TLS certificate, would that stop the hacker from redirecting ...
0
votes
1answer
40 views

How do websites prevent certificate forgery?

I have recently developed interest about Wireless hacking, and I have seen in many instances in videos and stuff that people are (or more correctly, were) able to perform some kind of MitM attack ...
0
votes
1answer
102 views

Is this company's claim to have solved MITM attacks true?

The Daily Mail reported in Dec 2014 about a company that claimed to have solved the MITM attack. Can someone explain how this is possible or what the difference is from TLS?
5
votes
0answers
55 views

SSL Certificate MITM Attack for Expired Domains

Let's say I have a domain name, like mysupercoolproduct.com. I buy a 2 year SSL certificate for it, and then I am negligent and the domain gets snatched up by someone else. I still have a valid SSL ...
6
votes
2answers
1k views

How does HSTS stop MitM attacks?

I know that until a few years ago, someone could set up a fake wireless AP, and use something like SSLStrip to lure the victims into connecting to insecure versions of the major websites, such as ...
1
vote
1answer
275 views

How to make sure that the public key has not been tampered with during transit?

I understand how public key infrastructure works. There is a private and public key, and someone may use the public key to encrypt data that can only be decrypted with the private key. However ...
0
votes
0answers
66 views

ECDH Man-in-the-middle active attack [migrated]

We have Alice and Bob. The man in the middle can manipulate(remove, add something etc.) A sent from Alice and B sent from Bob, how can he figure out what the common key K(A,B) is, without knowing ...
1
vote
2answers
102 views

Replacing images on HTTPS sites with MITMf?

I'm using MITMf for replacing images over HTTP, and everything works fine. But how can I replace images on sites like Google or Facebook that uses HTTPS? My actual command: sudo python mitmf.py -i ...
1
vote
1answer
485 views

Privacy error in google chrome

Recently I installed some random softwares on my windows 8.1 PC from the internet and along with that some malware also got installed. I started getting " Your connection is not private " error in ...
0
votes
0answers
52 views

Can someone who owns the wire read my SSL? [duplicate]

This question is regarding internet telecoms when the companies themselves are not to be trusted / cooperating with censorship-oriented governments, etc. Question: Assuming that a telecom owns the ...
0
votes
0answers
115 views

Secure Handshake and register for Auth

The registration The Start - pre-authentication Let's assume there are Alice and Bob. They know each others public keys and each of them generates a random string - Bob's Bobkey and Alice's ...
2
votes
1answer
31 views

Can the server detect when a client has disabled certificate pinning?

Many mobile applications enforce certificate pinning in order to make a man-in-the-middle attack difficult to accomplish. However, with a jailbroken/rooted device, it's possible to disable the ...
3
votes
1answer
58 views

Replay attack example for validating nonce?

I am trying to validate a JWT token received from Windows Azure. I am following the documentation here: ...
0
votes
0answers
19 views

Forwarding traffic to SSLSplit from Android

I want to forward non HTTP traffic to SSLSplit in order to do a MITM attack. How would I forward the traffic to SSLSplit from my Android?
1
vote
1answer
57 views

How can a server prove authenticity

I am working on a secure messaging platform and am having trouble figuring out how to protect against MITM attacks. My current setup can be summed up as follows: The server keeps a private key and ...
5
votes
2answers
109 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
3
votes
5answers
196 views

If I accept a certificate in order to use my company’s Wi-Fi, am I vulnerable to MITM attacks?

In order to get my personal phone onto the Wi-Fi network at my workplace, I have to accept a certificate: If I accept this certificate, will I be vulnerable to man-in-the-middle attacks? For ...
2
votes
2answers
81 views

What information can my ISP see using squid proxy?

My ISP provides a transparent proxy to use and I can see that they are using the squid proxy for caching this. What I am wondering is what data can they see and what can they see further if they can ...
3
votes
1answer
116 views

Monitoring an uninvited guest on my WLAN? [duplicate]

At home I configured a common, residential, consumer-grade wireless network. It is build from a Broadcom router connecting a few personal devices (i.e. my laptop & smartphone) to the Internet. My ...
6
votes
1answer
50 views

How safe is a standard wireless keyboard from a MITM attack?

And are there any mitigations except using a wired keyboard?
0
votes
1answer
36 views

Is there a point to Dnscrypt when using VPN?

If a computer is already connected to the internet through VPN, is there point in encrypting DNS queries? From DNScrypt: DNSCrypt is a protocol that authenticates communications between a DNS ...
1
vote
1answer
23 views

How could you detect and defend against this type of (local) man-in-the-middle attack?

Consider this type of non-standard man-in-the-middle attack, which is fundamentally the same nature of attack without the poisoning phase being required: Someone cuts the internet line at your ...
1
vote
1answer
82 views

Is or was it possible to register a wildcard certificate to third level subdomain?

The use of a null byte in a certificate cn is very well known… and I saw this code in a popular smtp server (who obviously thought it didn’t worth to use the gnutls or openssl for doing that kind of ...
0
votes
2answers
279 views

Sniffing WhatsApp chat using Wireshark

Suppose two persons are using WhatsApp on Android. How can I see the communication between them if I have Wireshark running on a PC listening on network interface card? I know the communication ...
11
votes
2answers
187 views

Detect Man In The Middle From An Application [closed]

I did an interesting experiment today. I opened Amazon.com in my browser, logged in, brought up Fiddler, and tried to add a brand new credit card. I typed in my credit card number, expiration, and ...
3
votes
2answers
62 views

Signing Double Submit Cookies, where the value is a pseudo random string and a signature of it. Is this more secure?

I'm not sure if I am describing something that has already been proposed. If not, I would like to coin this "Signed Double Submit Cookies" as a method to improve the Double Submit Cookies technique ...
0
votes
1answer
25 views

Is HTTPS (and other asymmetric security protocols) still secure when using a VPN?

When I am on "public networks" that I don't trust much (for instance in my school) I use a VPN to ensure my privacy. From what I understand, any non-HTTPS connection could be read by the VPN company, ...
1
vote
1answer
160 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
0
votes
1answer
58 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
1
vote
2answers
26 views

Mandadory checks a client should make to verify a ssl/tls certificate [duplicate]

Let's say I have a client, not a browser, that wants to connect with https to a server. It could be a python program, an android app or a library etc. Suppose the client has a list of trusted CAs and ...
32
votes
4answers
5k views

Can or should whitelisting replace encryption?

I've noticed that there is a third-party webservice we utilize programmatically at my job to transmit somewhat sensitive information and I was surprised to see that the endpoint was only using http, ...
3
votes
1answer
43 views

Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?

Is there a way for a domain good.com to promise that it will sign all of its DNS records, and that any unsigned records for any host *.good.com should be rejected? In other words, is there a way for ...
1
vote
1answer
86 views

Arp spoofing blocks internet [duplicate]

I work on a fresh Kali install running in a VM. I have an external Wi-Fi NIC used only by the VM (I try to not use the internet connection of the host). The network is protected (hum) by WEP, with ...
1
vote
1answer
64 views

man in the middle attack over internet

I've performed some man in the middle attacks (arp poisoning) using ettercap, stuffs on kali linux and i know how exactly it is working. but i was wondering if this attack could be even performed ...
2
votes
0answers
68 views

If I clear my browsing data, is HSTS protection removed?

I've seen that if I delete cookies and other data on Google Chrome, SSLStrip+ works successfully on those web sites that are not included in the browser list. Is it because HSTS data is cleared too?
1
vote
2answers
75 views

MITM my own SSL connections with e.g. wireshark - no proxy

I'd like to investigate some SSL (https?) traffic coming from one of my computers. The problem is that I don't know for sure which program it comes from, and I most likely can't make it use a proxy ...
0
votes
0answers
30 views

Does Apple CloudKit prevent 3rd party apps from MITM'ing the API?

One of the issues with SnapChat is that some users were using unauthorized apps to access the backend API, which then allowed for some application level security to be compromised. I am of the ...
43
votes
5answers
6k views

How does someone become a man in the middle?

As I understand it in order to commit a succesful MiTM attack you need to be "sitting" somewhere along the traffic path. I assume this means being hooked up to one of the nodes inbetween the end ...
1
vote
1answer
87 views

Why does SSLStrip work on some https sites and not others? [duplicate]

I recently tested MITM on my LAN through SSLStrip, but I noticed that on Gmail and Fb doesn't work, while on other sites I can sniff connections easily. What is the difference?
5
votes
1answer
54 views

Are there “master keys” that can be used to generate valid SSL keys?

I was in a discussion about SSL, and I was explaining that it's impossible to decrypt data sent over SSL if you don't have the key. Someone responded with the following, that really confused me: ...
1
vote
1answer
50 views

Rightscorp Scaleable Copyright - How would they avoid making this a massive security risk?

I recently read an article about a new copyright protection system that RightsCorp America is trying to get ISPs to help implement. From the Article: “Single notices can be read and bypassed ...
1
vote
0answers
50 views

How to perform a MITM between a server and a client program whose local ports are randomly spawned?

I usually used Burp or similar tools for browser-based communications. The client program in question doesn't offer a proxy option to be configured. So I can't use Burp in this case, besides ports are ...
7
votes
4answers
268 views

How can I detect HTTPS inspection?

In my company I do use my computer for private things like online banking and personal email during lunch time. I've always thought that when Firefox shows me the green lock symbol that a valid HTTPS ...
2
votes
1answer
33 views

Intercept pinned SSL connection with private key

Can I intercept https traffic that uses certificate pinning using fiddler if I have the private key of the cert? I am trying to intercept traffic between our mobile apps and API, and the mobile apps ...
3
votes
2answers
104 views

Is it safe to use TFTP on a local network

Is it safe to use TFTP on a local network to backup configurations? For example we had an experiment where there was an attacker using MITM technique to read all traffic destined for a server. On a ...
0
votes
1answer
49 views

Does using Tails make one a target? Is it possible to identify users of security-focused operating systems like Tails?

I'm wondering if Tails takes countermeasures to prevent the techniques that http://panopticlick.eff.org/ uses from identifying Tails users as such. (Presumably adversaries could identify users that ...
1
vote
0answers
18 views

How can I protect against cross-build injection and other dependancy management threats in Play Framework?

I am using Play Framework's inbuilt dependancy management to download a library (HTMLUnit), to do this I add the dependancy to the build.sbt file like so: libraryDependencies += ...
0
votes
1answer
64 views

Is it possible to run a MITM attack on WIFI hotspot [closed]

(completely opened hotspot) Example: can an attacker sniff traffic and credentials from a bar?
0
votes
1answer
46 views

MITM Traffic forwarding not working on Kali

I'm doing a ARP Spoofing MITM attack like this: arpspoof -i wlan0 -t 192.168.1.112 192.168.1.1 -r And I can see the traffic from the target (192.168.1.112) showing up in the sniffer, but the target ...
0
votes
0answers
37 views

Should sensitive data be encrypted before a POST request? [duplicate]

If sensitive data is being passed through an AJAX POST request, should this data be encrypted beforehand, or is simply using HTTPS enough to protect the data from man in the middle attacks?