2
votes
3answers
84 views

Can MiTM and similar attacks be performed on seperate networks

Okay, suppose that I have 2 computers: Computer A and Computer B, connected with this setup: A->switch->router->internet / B->router/ and the closest router to computer B is ...
0
votes
2answers
68 views

Proxy traffic via MITM script

I want to log and modify outbound traffic on a Linux machine. I currently have one program that sends requests out to the internet, I would like to process these requests and their responses via ...
1
vote
2answers
75 views

Why do client certificates not protected against improper server certificate validation

I understand the question of client certs and MITM attacks has been asked several times, but I don't believe this specific scenario has been answered. It was my (seemingly incorrect) assumption, that ...
2
votes
1answer
259 views

Why am I unable to connect to an address spoofed with arpspoof?

I wanted to see how many combinations of websites and browsers are still vulnerable to a tls stripping attack (like, by implementing HSTS or disabling cleartext HTTP altogether). To do it I wanted to ...
2
votes
3answers
259 views

If a MITM has your public key and you are SSH-ing through the MITM, what is the maximum attack it can perpetrate?

Firstly, let me start by saying that I am not attempting to hack anyone or anything (not that I would know how or where to begin, if I were). For illustration purposes, let's call the primary key ...
8
votes
1answer
429 views

Is it possible to recognise and prevent MitM attacks on devices which use self-signed SSL certs?

I use both Linux and Windows at work on a large enterprise LAN. The majority of the network configuration is out of my reach. Certain SaaS applications that are hosted locally on the enterprise LAN, ...
2
votes
1answer
3k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
0
votes
1answer
387 views

Man-in-the-middle attack over an encrypted channel

I learned recently about man-in-the-middle attacks and came up with this question. Let's say we have two computers who try to communicate over the network. Each computer has an encryptor and a ...
4
votes
1answer
664 views

Is it possible that my home router is preventing my ARP poisoning attack?

As part of a school project I am trying to do a MITM attack on my local network using ARP poisoning. I choose a target and then I send a spoofed ARP packet to it and to the router every 100 ...
3
votes
1answer
278 views

Are man-in-the-middle attacks against p2p systems realistic?

I'm implementing a DHT based on Kademlia following this paper. The protocol described in this paper uses nonces to protect against man-in-the-middle attacks. The disadvantage is that latency gets ...
2
votes
3answers
293 views

Without SSL, what vantage point does one need to MITM non-SSL'd HTTP?

OK, so there are two things here: being able to read the content of the requests and responses, and then being able to modify them. The former may depend on the latter, I'm not sure. But basically, ...
13
votes
6answers
3k views

Why is ARP poisoning killing all network activity?

Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
1
vote
3answers
1k views

MITM: tools for intercepting and modifying traffic?

I want to carry out a MITM attack to modify traffic, so I can strip out/modify things in the request. For example: When I receive a request on port 25, I want to be able to intercept all the ...
2
votes
3answers
163 views

Are my credentials unsafe if I am already logged-in before connecting to a public network?

Let's say I am already logged-in to my Gmail or Yahoo account using my 3G then I switched to a public WIFI in an airport or cafe. Is my username and password still vulnerable? What others kinds of ...
16
votes
5answers
8k views

Can I detect a MITM attack?

Based on this question here: Are "man in the middle" attacks extremely rare? Is it possible to detect man-in-the-middle attacks, and if so, how would one go about it? In addition, what if ...
106
votes
8answers
10k views

Are “man in the middle” attacks extremely rare?

In http://cdixon.org/2012/02/12/the-iphone-contact-list-controversy-and-app-security/ Chris Dixon makes a statement about web security Many commentators have suggested that a primary security ...