I was wondering what hardware could be used to bypass a VPN and get a user's email for example.

  • Why hardware and not software? What protections do you already have against software modifications? Does replacing the hard disk containing the VPN software with one containing a modified software as implanting hardware? Does installing a camera to capture the mail shown at the screen as implanting hardware? And, is the VPN software only within the desktop OS or is it a separate device or similar? – Steffen Ullrich Oct 6 '17 at 13:17

This is impossible from the outgoing network connection port (assuming the VPN is correctly configured). If it wasn't then any party between the client and remote infrastructure could MitM the connection.

So hardware wise you'd need something inside the machine with access to either the relevant data or VPN configuration - like a malicious CPU/RAM module. If you've got that level of physical access then if the disk is unencrypted it would be far easier to just inject a software hack.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.