A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

6
votes
1answer
103 views

How safe is a standard wireless keyboard from a MITM attack?

And are there any mitigations except using a wired keyboard?
0
votes
1answer
73 views

Is there a point to Dnscrypt when using VPN?

If a computer is already connected to the internet through VPN, is there point in encrypting DNS queries? From DNScrypt: DNSCrypt is a protocol that authenticates communications between a DNS ...
1
vote
1answer
27 views

How could you detect and defend against this type of (local) man-in-the-middle attack?

Consider this type of non-standard man-in-the-middle attack, which is fundamentally the same nature of attack without the poisoning phase being required: Someone cuts the internet line at your ...
1
vote
1answer
84 views

Is or was it possible to register a wildcard certificate to third level subdomain?

The use of a null byte in a certificate cn is very well known… and I saw this code in a popular smtp server (who obviously thought it didn’t worth to use the gnutls or openssl for doing that kind of ...
1
vote
2answers
1k views

Sniffing WhatsApp chat using Wireshark

Suppose two persons are using WhatsApp on Android. How can I see the communication between them if I have Wireshark running on a PC listening on network interface card? I know the communication ...
11
votes
2answers
206 views

Detect Man In The Middle From An Application [closed]

I did an interesting experiment today. I opened Amazon.com in my browser, logged in, brought up Fiddler, and tried to add a brand new credit card. I typed in my credit card number, expiration, and ...
3
votes
2answers
69 views

Signing Double Submit Cookies, where the value is a pseudo random string and a signature of it. Is this more secure?

I'm not sure if I am describing something that has already been proposed. If not, I would like to coin this "Signed Double Submit Cookies" as a method to improve the Double Submit Cookies technique ...
0
votes
1answer
29 views

Is HTTPS (and other asymmetric security protocols) still secure when using a VPN?

When I am on "public networks" that I don't trust much (for instance in my school) I use a VPN to ensure my privacy. From what I understand, any non-HTTPS connection could be read by the VPN company, ...
1
vote
1answer
163 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
0
votes
1answer
66 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
1
vote
2answers
26 views

Mandadory checks a client should make to verify a ssl/tls certificate [duplicate]

Let's say I have a client, not a browser, that wants to connect with https to a server. It could be a python program, an android app or a library etc. Suppose the client has a list of trusted CAs and ...
32
votes
4answers
5k views

Can or should whitelisting replace encryption?

I've noticed that there is a third-party webservice we utilize programmatically at my job to transmit somewhat sensitive information and I was surprised to see that the endpoint was only using http, ...
3
votes
1answer
52 views

Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?

Is there a way for a domain good.com to promise that it will sign all of its DNS records, and that any unsigned records for any host *.good.com should be rejected? In other words, is there a way for ...
1
vote
1answer
96 views

Arp spoofing blocks internet [duplicate]

I work on a fresh Kali install running in a VM. I have an external Wi-Fi NIC used only by the VM (I try to not use the internet connection of the host). The network is protected (hum) by WEP, with ...
1
vote
1answer
112 views

man in the middle attack over internet

I've performed some man in the middle attacks (arp poisoning) using ettercap, stuffs on kali linux and i know how exactly it is working. but i was wondering if this attack could be even performed ...
2
votes
0answers
74 views

If I clear my browsing data, is HSTS protection removed?

I've seen that if I delete cookies and other data on Google Chrome, SSLStrip+ works successfully on those web sites that are not included in the browser list. Is it because HSTS data is cleared too?
1
vote
2answers
154 views

MITM my own SSL connections with e.g. wireshark - no proxy

I'd like to investigate some SSL (https?) traffic coming from one of my computers. The problem is that I don't know for sure which program it comes from, and I most likely can't make it use a proxy (...
0
votes
0answers
45 views

Does Apple CloudKit prevent 3rd party apps from MITM'ing the API?

One of the issues with SnapChat is that some users were using unauthorized apps to access the backend API, which then allowed for some application level security to be compromised. I am of the ...
43
votes
5answers
6k views

How does someone become a man in the middle?

As I understand it in order to commit a succesful MiTM attack you need to be "sitting" somewhere along the traffic path. I assume this means being hooked up to one of the nodes inbetween the end ...
1
vote
1answer
144 views

Why does SSLStrip work on some https sites and not others? [duplicate]

I recently tested MITM on my LAN through SSLStrip, but I noticed that on Gmail and Fb doesn't work, while on other sites I can sniff connections easily. What is the difference?
5
votes
1answer
55 views

Are there “master keys” that can be used to generate valid SSL keys?

I was in a discussion about SSL, and I was explaining that it's impossible to decrypt data sent over SSL if you don't have the key. Someone responded with the following, that really confused me: ...
1
vote
1answer
53 views

Rightscorp Scaleable Copyright - How would they avoid making this a massive security risk?

I recently read an article about a new copyright protection system that RightsCorp America is trying to get ISPs to help implement. From the Article: “Single notices can be read and bypassed ...
1
vote
0answers
51 views

How to perform a MITM between a server and a client program whose local ports are randomly spawned?

I usually used Burp or similar tools for browser-based communications. The client program in question doesn't offer a proxy option to be configured. So I can't use Burp in this case, besides ports are ...
7
votes
4answers
292 views

How can I detect HTTPS inspection?

In my company I do use my computer for private things like online banking and personal email during lunch time. I've always thought that when Firefox shows me the green lock symbol that a valid HTTPS ...
2
votes
1answer
51 views

Intercept pinned SSL connection with private key

Can I intercept https traffic that uses certificate pinning using fiddler if I have the private key of the cert? I am trying to intercept traffic between our mobile apps and API, and the mobile apps ...
3
votes
2answers
110 views

Is it safe to use TFTP on a local network

Is it safe to use TFTP on a local network to backup configurations? For example we had an experiment where there was an attacker using MITM technique to read all traffic destined for a server. On a ...
0
votes
1answer
57 views

Does using Tails make one a target? Is it possible to identify users of security-focused operating systems like Tails?

I'm wondering if Tails takes countermeasures to prevent the techniques that http://panopticlick.eff.org/ uses from identifying Tails users as such. (Presumably adversaries could identify users that ...
1
vote
0answers
21 views

How can I protect against cross-build injection and other dependancy management threats in Play Framework?

I am using Play Framework's inbuilt dependancy management to download a library (HTMLUnit), to do this I add the dependancy to the build.sbt file like so: libraryDependencies += "net.sourceforge....
0
votes
1answer
77 views

Is it possible to run a MITM attack on WIFI hotspot [closed]

(completely opened hotspot) Example: can an attacker sniff traffic and credentials from a bar?
0
votes
1answer
77 views

MITM Traffic forwarding not working on Kali

I'm doing a ARP Spoofing MITM attack like this: arpspoof -i wlan0 -t 192.168.1.112 192.168.1.1 -r And I can see the traffic from the target (192.168.1.112) showing up in the sniffer, but the target ...
0
votes
0answers
38 views

Should sensitive data be encrypted before a POST request? [duplicate]

If sensitive data is being passed through an AJAX POST request, should this data be encrypted beforehand, or is simply using HTTPS enough to protect the data from man in the middle attacks?
3
votes
3answers
208 views

How to check if I have a rogue SSL/TLS certificate?

It's known, that if someone manages to install their certificate as a trusted certificate on your Windows computer, they can read all you SSl/TLS traffic with man-in-the-middle attack and you won't ...
2
votes
1answer
60 views

Why does Canonical not enable https here?

It is always verify disk images before using. In Ubuntu's website, many pages are sent through https. However, some of the most crucial pages are not. For example, http://releases.ubuntu.com/trusty/. ...
3
votes
2answers
149 views

Is email sent form a Java web-app over a HTTPS connection encrypted?

I'm working on a Java web-application which runs on a HTTPS connection. This application sends emails to its users. I want to protect those emails from man-in-the-middle attacks and other potential ...
59
votes
3answers
5k views

Why aren't IMSI catchers rendered ineffective by standard MITM defenses?

There's been a lot of reporting in the past few years about law enforcement agencies using IMSI catchers (also known as Stingrays after a popular brand of them) to intercept cellular communications. ...
1
vote
1answer
328 views

MITMproxy doesn't display HTTP/HTTPS traffic of Android Apps

I am using mitmproxy to analyse the https traffic of some Android Apps. A few days ago I was able to intercept all the traffic without any problem and now mitmproxy doesn't seem to work properly. ...
6
votes
1answer
84 views

What is Credential forwarding attack?

What is credential forwarding attack? Does this happen only when the client connects to two servers with same credentials?
1
vote
1answer
51 views

mitmproxy not displaying ARP-poisoned traffic

I have a target computer at 10.0.0.14 and gateway at 10.0.0.1. I successfully insert myself as a MITM by running sudo arpspoof -i wlp3s0 -t 10.0.0.1 10.0.0.14 sudo arpspoof -i wlp3s0 -t 10.0.0.14 10....
5
votes
2answers
137 views

Server-side man-in-the-middle/eavesdropping: attacks between two servers using unencrypted HTTP

I’m new to security, and I’m wondering how man-in-the-middle and eavesdropping attacks between web servers work, rather than between personal devices and servers. Most questions I see here about man-...
11
votes
2answers
859 views

How long can X.509 certificate chains be?

Usually, I only see certificate chains with a root CA, an intermediate one, and a third one for the particular SSL/TLS website; but can X.509 certificate chains be deeper than 3 levels? Is there a ...
7
votes
1answer
191 views

Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) atacks more difficult?

Does Perfect Forward Secrecy (PFS) make Man-in-the-Middle (MitM) attacks more difficult? If not, why?
4
votes
1answer
77 views

MITMf which files can it patch

From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following: use ...
6
votes
2answers
867 views

How does an attack on a digital signature work?

In our IT Security class we have been told that you need CA's to prevent attacks on a digital signature. Sadly, our docent didn't elaborate how such attack would be performed - I can only guess that ...
8
votes
2answers
2k views

How is it possible to do TLS through proxy without anyone noticing?

My workplace uses a proxy to connect to the internet, even for https sites. It was my understanding that for this to work, the proxy would be considered a MITM, and the certificate presented would be ...
1
vote
0answers
55 views

Open source tool to test a WAF against OWASP Top 10? [closed]

Are there any open source tools to test a WAF against OWASP Top 10? Especially I am looking for a tool that tests a WAF against different types of attacks & reports test results.
0
votes
3answers
107 views

Intercept HTTPS traffic.. with a cert

So I am working with Charles proxy server, I understand I can decrypt HTTPS traffic, if the user accepts the invalid cert warning on the browser or trusts charles as a root CA. However what I have is,...
1
vote
1answer
62 views

Can username/passwords be intercepted on an App using public wifi?

I use the ADVFN finance app for stock prices every morning on the public wifi on my train to work. This requires me to login with my username and password on the app(which are saved). Do apps provide ...
1
vote
1answer
66 views

How can an attacker downgrade/modify the cipher suites when they are MACed? (Freak, Logjam use downgrade attacks)

In the Finished handshake of TLS all previous messages exchanged are sent from the client to the server (and reverse) and protected by a MAC. This is what also "prevents" TLS_FALLBACK_SCSV from being ...
-2
votes
1answer
56 views

How to add scripts in HTML file passing through network? [closed]

how to add JavaScript file to every HTML document that is passing through your network ?
0
votes
0answers
50 views

How to prevent injection of Layered Service Provider (LSP) module in application with kernel-level?

LSP technology is often exploited by spyware and adware programs in order to intercept the communication across the Internet. For example, malware may insert itself as an LSP in the network stack ...