A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

0
votes
3answers
107 views

man in the middle question

I've been wondering about this scenario for a while but I cannot fully understand how it works. Say I am sitting in a cafe on my laptop with wireshark, the cafe has an open WiFi connection. Is it ...
1
vote
1answer
105 views

What can entreprise admins do with our secured sessions?

The enterprise where I work has a proxy server that traces and filters our web activities. Employees claim that they can know the links that we visited and see the content of HTTP web sites, but they ...
0
votes
1answer
82 views

Secure end-to-end when part of conversation must be over HTTP

We have a situation where a user's identity can be verified as follows: the network provider knows the identity of the user and injects secure headers into the HTTP request, which our servers can use ...
1
vote
1answer
393 views

Who can carry out Man-in-the-Middle (MITM) attacks?

We seem to spend a lot of time guarding against Man-In-The-Middle (MITM) attacks without discussing who we are actually guarding against. This is important because if these individuals are unlikely ...
1
vote
2answers
152 views

Authenticated sessions and Man in the middle

I see a lot of websites (including Stackoverflow) using this authentication mechanism: Client authenticates under HTTPS and gets back a session id. Client drops back to HTTP and accesses secure ...
2
votes
1answer
131 views

Simple way to protect ssh against man-in-the-middle attack? [duplicate]

If a narrow, trusted channel is needed (for example, there is an usb key to take data between the machines), it is okay. Although SSH will throw a big error if it tries to connect to a server ...
6
votes
3answers
1k views

Why can't we do MiTM attacks when using secure connection

I have this silly question that is bothering me. When not using secure connection (HTTP for example) cookies can be intercepted and used to connect to the site as if we have the id and password. We ...
4
votes
1answer
234 views

SSH MITM attack underway

UPDATE: The source of this problem has thankfully turned out to be a buggy mobile SSH client used on 2 different devices not a MITM attack. However, I'd still appreciate a full answer to the original ...
7
votes
2answers
710 views

LTE networks and MITM

2G would leave you vulnerable to spoofed base stations. 3G tried to somewhat fix that using mutual authentication. Now, I tried to check how LTE handles this but I couldn’t find any usefull ...
0
votes
2answers
132 views

Where can I practice MITM raw binary protocols?

I want to try practicing MITMing raw TCP binary protocols as well as MITMing HTTP protocol. What is the best way to do this? Are there any specific tools which help me do this? Like wireshark or ZAP ...
0
votes
1answer
797 views

How to prove iOS app is vulnerable to MiTM

I'm updating an iOS app and I want to prove that it is vulnerable to MiTM attack. I have set up Charles Proxy on my mac and configured the Simulator so that it trusts Charles CA Certificate, per ...
1
vote
2answers
185 views

How does police or somebody find out that an Arp Spoofing attack was done?

If you watch traffic in real time, you can see that an attacker doing a MiTM attack does ARP spoofing because MAC addresses will be duplicated, etc. And, well, you can see all MAC addresses and see ...
0
votes
1answer
5k views

Why is the deprecated SSL 2.0 protocol considered insecure and how can it be exploited?

I am making a presentation to the class about "SSL 2.0 deprecated protocol" and I really have no idea how this exploit is used or how the attacker can use this vul. I understand the impact of this ...
6
votes
1answer
95 views

Decline any custom ssl certificate in a mobile application

Consider the following scenario. Eve creates an access point in a public place. Alice connects to the AP via mobile phone and starts browsing the Web. Eve redirects Alice to a registration page and ...
3
votes
3answers
3k views

How to use my WiFi to inspect its user traffic and to run MiTM attacks?

As part of a security research, I need to make my WiFi open, and to inspect the traffic of the ones who connect to it. Additionally, I need to be able to change the content of the webpages they see, ...
8
votes
4answers
1k views

Is webRTC safe against man in the middle attacks?

We are implementing an open source software package (copay, a multisig bitcoin wallet), that uses peerJS, which uses webRTC to allow peer-to-peer communication between browsers. peerJS (and webRTC) ...
2
votes
1answer
140 views

MITM SSL connection

I read this article today about an SSL MITM. I am trying to understand this attack. This may be a naive question. My understanding is that the WebView sends a request to domain name, the server ...
13
votes
2answers
4k views

Is Apple's push notification service implementation vulnerable to a MitM attack

Recently(more info) I've spotted a strange message in the logs on my quite recent, fresh installation of OS X Mavericks 10.9.2 Apr 27 15:26:47 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf ...
1
vote
2answers
5k views

Unrecognized leaf certificate

Every 15 minutes or so I get this message in my system.log Apr 25 22:05:36 Ivans-MacBook-Pro.local apsd[194]: Unrecognized leaf certificate Apr 25 22:20:57 Ivans-MacBook-Pro.local apsd[194]: ...
0
votes
1answer
671 views

Detect possible router attack attemp

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 ...
2
votes
2answers
438 views

What prevents me from using ARP poisoning to force a client to use HTTP?

So I was just thinking about how ARP poisoning can be used to intercept a clients request, forge an SSL cert, and send it back, with the caveat of not meeting certificate validation, but what if I ...
2
votes
1answer
735 views

Why is the SSL handshake not shown in Wireshark?

I am trying to figure out if some Android applications with login functions are vulnerable to man in the middle attacks or not. I have set up a MITM proxy (as an attacker) on my lubuntu machine and ...
4
votes
1answer
414 views

Is DNSSEC immune to stripping signatures?

In my opinion, it should be possible to forge DNS reply so it doesn't include DS/RRSIG/... parts for any request, thus bypassing DNSSEC validation of resolved domain. Is DNSSEC system immune to this ...
1
vote
1answer
349 views

Would there be MITM attack even fix the heartbleed vulnerability? [closed]

I have read this post askbuntu, the step to fix the heartbleed vulnerability almost: 1. upgrade openssl. 2. generte new keys. 3. revoke the old certificates. Some posts say attackers may have got ...
0
votes
2answers
412 views

Are SSL encrypted communications through a company network safe?

If I'm using Skype, Facebook, or another type of communication at my work, can the network administrator see my Skype and Facebook conversations, although its encrypted with SSL? I found this text: ...
9
votes
2answers
863 views

HTTPS login vs MITM attack

http://www.troyhunt.com/2013/05/your-login-form-posts-to-https-but-you.html My question is, if the threat is that someone controls your internet connection and can serve up bad login pages, couldn't ...
1
vote
1answer
763 views

Why is ettercap targetting the whole network?

I recently tried to do a MiTM attack on my network using ettercap. I have a router, two windows 7 machines : Host A and Host B, and Backtrack on a VM. In the ettercap window I added the router as ...
2
votes
1answer
99 views

Threats against website running without TLS but with PGP messages

Are there any threats against a web site that isn't running SSL but uses PGP to encrypt all information to the server (except session identifier) The information flow is as such: 1. Session ID set on ...
0
votes
1answer
79 views

Safely creating and communicating within a fully decentralized p2p network

I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong. I've been looking into the practical implications of ...
2
votes
1answer
115 views

Can IP phones be eavesdropped upon if administrator access is available?

I am interested in demonstrating an attack to my university's security team on IP phones installed at the university. The IP phone models are Siemens optipath410. Basically, using nmap, I identified ...
2
votes
3answers
149 views

Can MiTM and similar attacks be performed on separate networks

Okay, suppose that I have 2 computers: Computer A and Computer B, connected with this setup: A->switch->router->internet / B->router/ and the closest router to computer B is ...
15
votes
5answers
7k views

How safe is SSL? [closed]

If I got an SSL certificate for my website and use an SSL secured connection (HTTPS), is this safe enough to send my login and password data or should I add some encryption or hashing? And how safe ...
0
votes
1answer
352 views

MitM Attacks - Iptables?

I have looked for the answer to this question to no avail, apologies if I missed it. I would like to know how effective iptables would be against MitM attacks - in the following setup: ALLOW INPUT ...
0
votes
1answer
336 views

CAPTCHA Bypassing with Captcha Clipping Attack is Like MiTM between servers, Is that even Possible?

Sorry if this is a very amateur question. I was checking out some article regarding CAPTCHA bypassing. And I though this article seemed interesting ...
1
vote
1answer
165 views

MITM Attacks with Web GUI

I'm thinking of writing an application that communicates sensitive information (using Python, if that's relevant). Instead of using the standard GUI libraries (like GTK, Qt or wxWidgets), I was ...
3
votes
1answer
3k views

HMAC solution for a rest API

I'm trying to learn some things about REST apis and one of the topics that I'm having some trouble is security. I'm using angularjs for web interface ans slim framework for the php api. I've read ...
1
vote
1answer
168 views

Behavior of trusting a self signed SSL certificate

I have just deployed a Turnkey appliance which comes configured with a self signed certificate. This is a server that only I will be using, so I don't want to pay for a certificate. If I add this ...
19
votes
4answers
1k views

Is it possible to boot an encrypted server remotely and securely?

Imagine you have a server that is at a location which is not trustworthy. People might have physical access to the machine who are not supposed to look at the data stored on it. In this scenario I ...
0
votes
2answers
111 views

Protecting against/detecting a specific Man in the Middle attack

I'm working on a specific (hypothetical) situation, where I have two client machines attempting to perform a public key exchange, via a server. There's no possibility for a direct connection between ...
0
votes
1answer
169 views

Wouldn't transient cookies for session management increase effectiveness of MITM?

According to wikipedia, a transient cookie (aka session-cookie, in-memory cookie) is forgotten when the user closes the browser. These are also recommended for session cookies by OWASP. I've seen a ...
0
votes
1answer
85 views

Man in the middle and goto fail

My question is inspired by apples goto fail; bug. I am wondering if the bug is really as dangerous as it is propagated everywhere. The reason I am in doubt about that is that there is a MITM attack ...
1
vote
1answer
335 views

Legitimate use case of man-in-the-middle attack for DPI?

I am working on a device that should sit between the end-user and the server, and that will do deep packet inspection. It is basically a parental control node. This device will be sold to the user, so ...
2
votes
1answer
122 views

Does using Chrome bypass the Apple iOS gotofail bug ?

Does the recent certificate gotofail bug affect me if I'm running version 6 of iOS, but only use Chrome as my browser?
2
votes
0answers
277 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
1
vote
0answers
23 views

Secure channels without web-of-trust or CA

I was reading about Impagliazzo's five worlds and I have some questions about cryptomania and minicrypt: What is difference between them? I cannot find one? How does cryptomaniac MitM protection work ...
1
vote
1answer
119 views

How much harm can an attacker do on the Diffie-Hellman exchange?

I'm looking at a system that uses an unprotected Diffie-Hellman exchange to negotiate a key for the session encryption. That Diffie-Hellman is not secure against man-in-the-middle attacks is textbook ...
0
votes
2answers
212 views

Proxy traffic via MITM script

I want to log and modify outbound traffic on a Linux machine. I currently have one program that sends requests out to the internet, I would like to process these requests and their responses via ...
1
vote
0answers
174 views

Does Diffie-Hellmann (DH) key exchange protocol lower Off-The-Record protocol (OTR) security level?

Off-the-Record protocol employes Diffie-Hellman key exchange protocol (DH). DH protocol does not provide authentication of the communicating parties and, according to many sources, is vulnerable to ...
2
votes
2answers
946 views

DNS cache poisoning in LAN without MITM

Many questions have already been asked about DNS cache poisoning (aka Kaminsky attack), however I couldn't find a clear answer to my question: Is DNS cache poisoning possible in a LAN, without ...
1
vote
1answer
107 views

Is it dangerous to sync my data with my personal server through unencrypted http?

Since Apple force iPhone users to use iCloud to sync contacts & calendar, I moved to a local ownCloud instance that works well. However, it would be more convenient if I could sync everywhere and ...