Tagged Questions
3
votes
1answer
137 views
Is it possible that my home router is preventing my ARP poisoning attack?
As part of a school project I am trying to do a MITM attack on my local network using ARP poisoning. I choose a target and then I send a spoofed ARP packet to it and to the router every 100 ...
2
votes
1answer
166 views
Are man-in-the-middle attacks against p2p systems realistic?
I'm implementing a DHT based on Kademlia following this paper.
The protocol described in this paper uses nonces to protect against man-in-the-middle attacks. The disadvantage is that latency gets ...
2
votes
3answers
185 views
Without SSL, what vantage point does one need to MITM non-SSL'd HTTP?
OK, so there are two things here: being able to read the content of the requests and responses, and then being able to modify them. The former may depend on the latter, I'm not sure.
But basically, ...
11
votes
6answers
2k views
Why is ARP poisoning killing all network activity?
Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
1
vote
3answers
798 views
MITM: tools for intercepting and modifying traffic?
I want to carry out a MITM attack to modify traffic, so I can strip out/modify things in the request.
For example:
When I receive a request on port 25, I want to be able to intercept all the ...
0
votes
1answer
289 views
What kind of network tapping/sniffing hardware can be used to install NIDS or examine networks? [closed]
I'm looking for a device that can be plugged in between a client computer and a switch and records all ethernet packets and puts it into a pcap file or similar in order to analyse it with wireshark.
...
2
votes
3answers
152 views
Are my credentials unsafe if I am already logged-in before connecting to a public network?
Let's say I am already logged-in to my Gmail or Yahoo account using my 3G then I switched to a public WIFI in an airport or cafe.
Is my username and password still vulnerable?
What others kinds of ...
12
votes
6answers
2k views
Can I detect a MITM attack?
Based on this question here:
Are "man in the middle" attacks extremely rare?
Is it possible to detect man-in-the-middle attacks, and if so, how would one go about it?
In addition, what if ...
96
votes
8answers
8k views
Are “man in the middle” attacks extremely rare?
In
http://cdixon.org/2012/02/12/the-iphone-contact-list-controversy-and-app-security/
Chris Dixon makes a statement about web security
Many commentators have suggested that a primary security ...
