A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

4
votes
2answers
89 views

Check validity of SSL cert on public network?

So my company has just started issuing their own SSL certificates, so HTTPS sites now show as being secure, but if you check the certificate used the root CA is us, not whoever the site used. This ...
0
votes
1answer
71 views

Sample attack scenarios on file downloads over HTTP

The websites that serve files over https, can it be considered overkill? or is it a best practice everyone has to follow? The downside to serving files over HTTPS is that you will lose the caching as ...
3
votes
1answer
60 views

Simulate Tor Circuit

So an interesting thought popped into my head as I was thinking over the Cryptowall malware. If you don't already know, Cryptowall utilizes the Tor service to make the back-end service it uses ...
2
votes
1answer
57 views

SAML without certificate

A company asked me if it is possible to use the SAML-protocol without any certificate at all. The standard doesn't require a SAML-ticket to be signed or encrypted so the answer would be yes? Is this a ...
4
votes
3answers
285 views

How does a Man In the Middle attack happen in reality

I am trying to improve the MITM protection of an iOS app I am responsible for, so I want to understand exactly how it happens. I have set up Charles to act as a proxy which required setting the proxy ...
3
votes
1answer
123 views

Xfinity Wifi Risk

I recently discovered and would like to use Xfinity Wifi around town. However, it seems like a remarkably dangerous thing to do, even if you do confirm an access point's location via their geo-...
1
vote
4answers
152 views

Why is MITM required for Session Hijacking?

As I understand, the basic concept of Session Hijacking is intercepting a packet in which the victim sends its cookie/session credentials to a server, be it Facebook/Twitter/YouTube/Whatever. But ...
1
vote
2answers
97 views

is the evil twin attack considered sniffing?

Is the evil twin attack included in the sniffing category ? I am really confused and i can't tell if it is.
1
vote
2answers
86 views

How do web hosts know you own your domain?

Let's say I registered a domain on Namecheap and want DigitalOcean to be my host. This can be achieved by first setting the nameservers to DigitalOcean in Namecheap's backend: Second, we add some ...
1
vote
2answers
89 views

Understanding the behaviour of existing eavesdropping techniques

I am studying the behaviour of existing eavesdropping techniques (part of my research). I have a question through the following scenario: Suppose Bob lives in New York and wants to listen (i.e. ...
3
votes
1answer
177 views

MITM over WPA2 (e.g. with ettercap)

I've read on a few sites that it's possible to conduct MITM attacks over WPA2-secured connections. So for example I could replace the content of a site a user tries to access over HTTP. Is this true? ...
3
votes
0answers
53 views

Local sockets: does SSL add security? [duplicate]

Situation We have a Windows Service that is listening on a TCP port. This service is responsible for capturing a user's fingerprint using the Windows Biometric Framework, when requested to do so by a ...
5
votes
1answer
160 views

Detect man-in-the-middle on server side for HTTPS

Background: We have a site which works over HTTPS (HTTP not supported, we use HSTS). It's deployed in 3rd party cloud, which restricts our control and log abilities over server hardware. We cannot ...
0
votes
0answers
22 views

What stops a man in the middle attack from intercepting SSL encrypted data and sending it with a spoofed ip address to the server? [duplicate]

Say you have a client that connects to a server using SSL. The server, upon receiving a certain command, launches a missile. Then say there's someone in the middle of the connection listening to the ...
1
vote
1answer
65 views

MitM attempt resulting in ICMP redirects

I am trying to 'man in the middle' a device on my wifi network. I have configured it to use my Linux machine (also in the wifi network) as a default gateway. On the Linux (attack) host, I switched on ...
0
votes
1answer
129 views

What is the difference between Wireshark and Ettercap for man in the middle attacks!

I know of the two programs, one is Wireshark (a packet sniffing program) and the other is Ettercap (a man in the middle attack program). I tried doing a MITM attack before, legally on my own home ...
1
vote
2answers
197 views

HTTP login to iframe HTTPS/ MiTM attack

I would like to know if the credentials can be intercepted/MitM attack if the site is using HTTP to HTTPS login iframe. Here are some login details from my Chrome dev tools (Form Data) So I can see ...
2
votes
0answers
42 views

Chrome: Watch for modified https-certificates

I read a lot about security of https and possible MITM attacks lately. For me it seems there is only possible way to make a https-MITM attack: When a MITM exchanges the shipped https-certificate and ...
5
votes
1answer
323 views

Is it possible to detect DPI (Deep Packet Inspection)?

If one suspects one's packets are subject to DPI, how can it be detected?
1
vote
1answer
126 views

Can network admin detect an MiTM attack?

I am on a WiFi network with a SonicWall router (I'm guessing this comes with an IDS). If someone on my network launches an MiTM attack on me, will the network admin be able to detect this? Does an ...
5
votes
4answers
329 views

How can I intercept video over a wireless network in real time?

Can you sniff the packets or use a network analyzer or MITM or ARP spoofing to somehow be able to see the videos that someone else is watching on a network in real time? Also: Can you somehow see ...
3
votes
1answer
45 views

Sending noise over wire, using hashes of noise to carry data

Imagine highly dystopian environment, where oppressive evil government MITMs over all connections and uses DPI to thwart any attempts to use TLS/SSL, TOR, I2P etc. To establish connection, these ...
4
votes
1answer
87 views

MITM or Something Else?

Problem: When a given set of user devices (tablets/laptops) downloads files from a certain server from outside the host server's country, downloads are sporadically and routinely interrupted. The ...
42
votes
3answers
4k views

Is it common practice for companies to MITM HTTPS traffic?

My company has just introduced a new VPN policy whereby once connected all traffic is routed the company network. This is to allow for improved monitoring of data theft. It would appear that this ...
6
votes
1answer
74 views

Is there any benefit in having CNNIC certificates installed, if you're not in China?

All modern browsers/OS come with root certificates from the China Internet Network Information Center. AFAIK these certificates are required for computers sitting behind the Great Firewall to function ...
-3
votes
1answer
102 views

There is an actual working SSL MITM nowadays?

It's been a while since SSLstrip is deprecated and I see no more options for SSL mitm because of OSCP/HSTS and browser counter measures.. Is SSL so unbreakable to common sys admins? As the owner of ...
1
vote
1answer
66 views

Can you force your PC or device to use only DNSSec-verified lookup results?

Okay, I'll admit something first-off: I don't really understand some of the practical aspects of how DNSSec protections work very well.(Even after reading resources like this.) Well, I certainly ...
0
votes
1answer
79 views

Man in the middle attack on loopback

We made a client/server program that runs at localhost. Is it possible to execute a man in the middle attack on the loopback between the client and server?
2
votes
3answers
138 views

Why include a private key in a root certificate?

In the recent Dell root certificate issue (see https://threatpost.com/dell-computers-ship-with-root-cert-private-key/115455/), the private key was included with the certificate. This is baffling to ...
3
votes
1answer
260 views

Check root certificates and certificate authorities on new PC

First Lenovo was caught shipping Superfish with new PCs, which included a universal self-signed certificate authority, and now Dell has been caught shipping PCs with a similar root certificate. What ...
3
votes
2answers
431 views

What are the risks of using TLS 1.0 for web applications?

I work with a company that has several web applications available to its customers via HTTPS. Recently, client browsers will not access these web applications due to the HTTPS connection being made ...
16
votes
4answers
2k views

Broken SSL on every website [duplicate]

One of my friends called me saying every website anyone in her family goes to has untrusted SSL certificates. From any computer in her house, HTTPS is broken and Firefox or Chrome asks to add an ...
4
votes
1answer
115 views

Likely Sources of MITM Attack over Public Internet SSH

Earlier today when attempting to ssh into my remote server, I got the standard man in the middle warning relating to inconsistent public keys. In fact the key-type wasn't even correct. My server uses ...
2
votes
1answer
125 views

Point-to-point Microwave Security

I have found online multiple references to sniffing attacks on point-to-point microwave links, either by sitting in the side lobes or on a rooftop within the line-of-sight path. However, my search on ...
1
vote
0answers
58 views

SSLStrip not working on custom ports

I have been using sslstrip for a while and it works fine on websites on which HSTS is not enabled. However when the SSL server is running on some custom ports sslstrip fails. eg: For links like https:/...
0
votes
2answers
184 views

If I browse a website over HTTPS using a VPN, can the data be sniffed somehow?

I bought yesterday a flight from an American website. In my country, tickets are too expensive. Therefore, I used a IPVanish VPN to browse the airline website. It appears as if I visited it from New ...
6
votes
1answer
66 views

Does HTTP/2's opportunistic encryption potentially allow man-in-the-middle attacks?

HTTP/2's opportunistic encryption of http URIs using TLS appears to allow the possibility of man-in-the-middle attacks. Is that true? RFC for opportunistic encryption. Here's HTTP/2's spec for ...
1
vote
2answers
208 views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
1
vote
2answers
74 views

Would MITM be able to manipulate the X-Frame-Option

I was wondering if the following scenario was realistically achievable. We have a Network with a Computer that is used by Bob. He is security conscious person and uses a password manager. His ...
6
votes
3answers
1k views

How to securely read a physical memory address in Linux?

I am trying to read a physical memory address in a device running embedded Linux with our application. The widely suggested method is to use mmap, convert it into virtual address and then read the ...
2
votes
1answer
108 views

How does SSL inspection work on personal devices without deploying a trusted custom certificate?

My (limited) understanding of SSL inspection is that the process involves deploying a certificate to each host that SSL inspection will be monitoring. In an enterprise environment, I can understand ...
1
vote
0answers
64 views

Why don't more servers use HTTPS to secure executable downloads? [duplicate]

I actually check for TLS before I use any exe files. I've been trying to download a bootable usb creator tool for windows. However, I can't find a single one that actually uses any form of TLS (or ...
1
vote
3answers
204 views

Can man-in-the-middle attacks affect anyone not connected to the attackers network?

I'm trying to understand what these attacks are restricted to. I'm aware that man-in-the-middle attacks can be done if the attacker is on the same network (using something like Wire Shark), but is it ...
5
votes
3answers
223 views

How to check if your Android app was updated by MitM?

As I was browsing on my phone yesterday, a gray popup appeared on my screen just as I was swiping up, and I accidentally hit the accept button. In the fraction of a second it was on I was able to read ...
7
votes
2answers
206 views

Does using a VPN completely stop MITM (man in the middle) attacks? If not, what other defences should I consider?

Just for added context, I am curious about connecting to a remote desktop using a VPN but if there are any major differences that can be highlighted for other services I would be interested in that ...
4
votes
2answers
183 views

SSLStrip still HTTPS

I did all the configuration right. IPtables, port forwarding, ARPspoof, everything. However, in the browser websites like Facebook and Twitter are still HTTPS. What am I doing wrong?
2
votes
3answers
91 views

Can a file get accidentally corrupted while downloading?

I read an answer here about websites providing downloadable files together with their hashsums. It contained a sentence I'm thinking about whenever I download something, but I never really understood ...
1
vote
2answers
642 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
3
votes
4answers
86 views

How to Protect Webservice on Private Network?

We are building a webservice that will only be queried by other servers on our private network. I was suggesting that we put that webservice over https and use either client ssl authentication or a ...
2
votes
1answer
37 views

Security of https website which resolves to local ISP (ex. twitter)

Recently I noticied that some of social networks (ex. twitter) domains points to an IP in my local ISP. (ping twitter.com resolved to local ip: 3.4.5.6-static.bad-government-isp.com). Note: now ...