Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
1
vote
1answer
38 views

intercept TCP traffic on compromised router

I have this configuration GATEWAY1 <----> ROUTER <---> GATEWAY2 I am on the compromised router, and I want to intercept/block the packets that come from G1,edit them , and forward on ...
0
votes
1answer
63 views

How to decrypt TLS traffic originating from a Windows service on my Windows 10 PC?

Some months ago I bought a peripheral device for my Windows 10 computer (think of something like a game controller). My home router has a function that allows it to capture all incoming and outgoing ...
21
votes
9answers
6k views

How does one take advantage of unencrypted traffic?

Let's assume an ecommerce site works over HTTP, rather than HTTPS. What are the practical dangers here? How could an attacker exploit this? Whenever I read about dangers of unencrypted traffic, it is ...
1
vote
0answers
38 views

Problems understanding the use of Distance Bounding against Man-In-The-Middle attacks

I currently have to write a paper for university in my Network Security lecture about methods of secure location verification. Therefore, I chose to write about several distance bounding protocols, e....
4
votes
0answers
130 views

How to bypass certificate pinning in Android phone?

I am working on analyzing Android applications from my phone using MITM Proxy. My Android phone version is 4.4.2, SDK is 19 and its rooted. I have performed all WiFi configurations required for MITM. ...
0
votes
2answers
150 views

How can I determine if my employer is using their security certificate to MITM employees' HTTPS connections?

My employer recently changed their WiFi network set up, and they now require accepting a certificate in order to connect. Is there any way that I can check if they are performing a MITM attack to spy ...
1
vote
1answer
50 views

When logging into my work WiFi (we are allowed to do this) what exactly can they see? [duplicate]

My work lets us log onto their WiFi with our personal phones. We don’t have to log on every time; it just connects automatically. I have nothing downloaded on my phone from my work that they could ‘...
0
votes
2answers
67 views

If i connect to a VPN server using cicso anyconnect or PPTP protocol which has invalid certificate, can they sniff my HTTPS data?

Lets say i have connected to a VPN server using Linux with the help of Cisco anyconnect protocol or PPTP protocol. now when i try to connect to it, it says : The certificate may be invalid or ...
2
votes
1answer
95 views

Did Wireshark capture an update of Adobe Acrobat Reader over an unencrypted connection?

My home router is an AVM FritzBox and it's able to log all incoming and outgoing traffic in a file format readable by Wireshark. Some days ago I started capturing all traffic for about an hour to get ...
1
vote
0answers
43 views

Does the USB connection have to be trusted when using Yubikey CCID/PIV?

I use a Yubikey in PIV/CCID mode. The PIN is sent from the host computer via automated script and unlocks the Yubikey PIV smartcard. In this mode, is it essential that the USB connection is trusted? ...
0
votes
1answer
49 views

Difference between private key exposure and tampering in mutual authentication

Consider a remote and local system doing mutual authentication either by TLS through server/client certificates or similarly wireguard. What are the differences when the private keys (in particular ...
0
votes
1answer
54 views

Can a MiTM essentially block a connection?

If the target's traffic is going through the MiTM, then can't the spoofer find a way to just not traffic the connection? Or traffic the connection very slowly? Over all what I'm asking is that instead ...
0
votes
1answer
65 views

Does HTTPS mean that packets can't be read by intermediaries (like listeners at a VPN node, for instance)? [duplicate]

Say I'm using a VPN to talk with a server, and Bob is eavesdropping for packets at the VPN. Basically a special kind of man-in-the-middle attack. If I'm using HTTPS, how clever would Bob have to be to ...
1
vote
2answers
99 views

Securely installing software in a hostile environment

Consider the case where a user with a freshly installed Linux box is operating in a hostile environment controlled by an attacker with access to the internet gateway. How can such a user update the ...
1
vote
1answer
105 views

Isn't HTTPS enough to prevent MITM in mobile apps? Why is SSL Pinning needed?

I am making a webview that is going to be part of a native iOS and Android app, I implemented the webview using HTTPS as a protocol, and developed my NodeJS app there. But the security team from where ...
1
vote
0answers
101 views

How docker is translating docker0 interface ip address to host ip address

I'm trying to create a lab environment to experiment with MiTM attacks. I want to learn docker also so I've decided to do this with docker. I created 2 images (attacker, victim): Victim - based on ...
-3
votes
1answer
86 views

What type of attacks does HTTPS protect against? [closed]

What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in ...
0
votes
1answer
94 views

MAC address of router changes when i connect to VPN

If I connect to my VPN and then run arp -a the MAC address of my router changes to 00:00:00:00:00:02. Is this normal behaviour? What is the reasoning behind this? Furthermore a MAC address spoofing is ...
1
vote
1answer
94 views

Intercepting TLS 1.2 connections

I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic. Is there any way to decrypt the ...
0
votes
1answer
87 views

At times bettercap ARP sniffing works great and at times not at all, what would be the reason?

I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL ...
1
vote
1answer
66 views

HTTPS inspection and TLS certificates

I have some difficulties wrapping my head around the following concept: When HTTPS inspection (outbound) is enabled on a NextGen Firewall (NGFW) e.g. CheckPoint, a certificate has to be installed on ...
2
votes
1answer
211 views

Man in the middle using HTTPs downgrade to HTTP

In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without ...
0
votes
0answers
147 views

MiTM attack on a Tor V3 Onion Service?

As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. ...
0
votes
2answers
80 views

Are 3rd party CAPTCHA techniques vulnerable to MITM attacks?

Presume I'm a bad actor and want to do a naughty thing on a site protected by some 3rd party CAPTCHA solution. For instance, perhaps I'm a spammer who wants some way to script sign-ups to Hotmail. For ...
1
vote
1answer
74 views

Error in intercepting the request of an Android application

I'm trying to analyze my flutter app's network traffic so I used burp suite for intercepting. First, I'm using the proxy option of burpsuite. I set my PC's IP address and port as 8080. Also in my ...
0
votes
1answer
67 views

Update URL over HTTP

I saw VLC (Windows) gets updates from an unencrypted URL: HTTP, not HTTPS! Do you think there's a risk for a man-in-the-middle attack?
1
vote
0answers
33 views

Macbook Pro USB device security at lock screen

I am performing research on some attacks using a USB micro controller to perform man in the middle attacks on Windows and MacBooks, by emulating an ethernet over USB. During my testing I found that on ...
0
votes
0answers
28 views

MITM attack on key based ssh connection when knowing server's private host key [duplicate]

I read this article that claims that ssh mitm are not possbile when private / public keys are used: https://www.gremwell.com/ssh-mitm-public-key-authentication I wonder how this would change if an ...
2
votes
3answers
168 views

Security implications of Cloudflare's SSL Full mode (not Strict)

Cloudflare enables several options regarding the communication between its servers and our own. "SSL Full" means Cloudflare encrypts the traffic but doesn't check the validity of our servers'...
0
votes
1answer
120 views

Securing internet connection with hostile ISP

Please excuse the lack of details, you can understand why. I have a friend in a foreign country who is certain that he is a surveillance target of his local government. Other people he knows in his ...
0
votes
1answer
96 views

Does Two Factor Authentication (2FA) prevent Phishing and/or Man-in-the-Middle (MITM) attacks?

While 2FA is clearly an improvement over only a single factor, is there anything which prevents an adversary presenting a convincing sign-in page which captures both factors? I realise that ...
0
votes
1answer
70 views

Internal HTTPS recommended security practices

So I'm by no means a security expert. I'm just a recently graduated software developer who is working on a contract project and I want to ensure I'm taking appropriate security measures for my client. ...
0
votes
0answers
168 views

MiTM using ettercap and burp suit and iptables

I'm trying to perform a MiTM attack on a local network connected device. I configured the iptables to route the incoming traffic to port 443 and port 80 so it can be captured by the Burp Suite. ...
1
vote
1answer
160 views

How does a person under surveillance safely download tor or tails in a hostile environment?

One of tor's stated goals is to help individuals such as journalists, activists and whistleblowers protect against surveillance, and in many countries people in those lines of work or activities are ...
32
votes
1answer
18k views

Why is there no web client for Signal?

I’ve read about E2EE (end to end encryption) of Signal in web clients on a Signal Community discussion forum, and wonder why they say that the browser is insecure for E2EE and native apps are secure. ...
0
votes
0answers
106 views

webmitm SSL key error

I am trying to use webmitm to forward all HTTP/HTTPS traffic to another host that is running Burp Suite (ex: 192.168.1.8). Webmitm creates a crt and then I receive the following errors: webmitm -d ...
0
votes
0answers
28 views

Fixing BLE Passkey Entry with SRP

First post, not a crypto expert. :) TLDR Is it wise to use SRP to implement app-level "passkey entry" pairing in Bluetooth LE? There are known issues with using fixed passkeys in BLE, even ...
0
votes
0answers
47 views

Private key vs encryption session keys: For what is the private key used when there are session keys for encryption? [duplicate]

I have read that the private key that the certificate owner/web server has (which is the corresponding private key of the public key presented on the certificate) is used to decrypt the data that the ...
0
votes
0answers
176 views

MITMPROXY on router

I am familiar with MITM LAN attacks using dnsspoof and arpspoof to read client data. Instead of spoofing the DNS and impersonating the router on my physical machine, I want to set up a MITM LAN ...
2
votes
2answers
242 views

MITM attack with HSTS implemented websites

I want to perform a Man-in-the-Middle attack against my own network for educational purposes. I want the following scenario: Perform a MITM attack with Bettercap, navigate to a website and accept the ...
9
votes
4answers
1k views

What's the point of providing file checksums for verifying downloads? [duplicate]

Many projects offering binaries, also offer hashes (e.g. SHA256) of those binaries, wither as .ASC files, or directly on the web page near the binary. This isn't to protect against network-caused ...
0
votes
1answer
108 views

Does sslstrip have to do something with Bettercap's certificate?

I am trying to perform a MITM attack using bettercap against a website that doesn't have the HSTS security policy implemented at all. When I try the following command: bettercap -T ...
0
votes
1answer
53 views

Establishing safe connection in Java

In my Java project I'm trying to create a 100% secure method of communication between the method and the client. I used to use this process: Client: generates 4096-bit RSA keypair Client: sends public ...
-1
votes
1answer
58 views

Strong TLS parameters even though MITM is being performed

I am performing a MITM attack against my own network using bettercap and https proxy. On my client-side I use the Google Chrome browser and navigate to https://webs.com At the same time I use a script ...
0
votes
2answers
137 views

can anyone with valid ssl certificate do man in middle attack?

Suppose I have a valid SSL certificate for my application certified by valid CA and I turn evil. Now I want to do MITM between A and B. When I'll get a request from A, I'll send my valid SSL ...
0
votes
1answer
125 views

Block HTTPS/TLS (Wo)Man in the Middle Attack

I found out that the landlord of my building is able to access all my internet URLs even though they are HTTPS. Ex they are able to see this entire URL: https://www.google.com/search?q=stackoverflow ...
0
votes
1answer
59 views

How to seal the lock with cryptography [closed]

I am new in the world of cryptography. I'm working with an IoT project. My job is to protect the entire data. So, I need some cryptographic security. I want that data should be encrypted before ...
0
votes
1answer
81 views

Force public key collision to break certificate pinning

I'm trying to intercept a SSLv3 connection between a PlayStation 3 client and an authentication server of and outdated game to reverse engineer its protocol. I already tried to set up a simple MITM ...
1
vote
0answers
16 views

Tor and MITM SSL [duplicate]

In my company they have MITM/SSL in following way. There is a proxy to whom all PCs connect. Now the company installed some trusted certificate authority (e.g. ISSUER-COMPANY-NAME) on our computers. ...
0
votes
0answers
53 views

Hard Wired Man in the Middle Logging

I am wanting to set up a single logging point on my home network that logs URLs and search terms to monitor teenagers... um... activity. I was thinking of setting up a computer between the cable modem ...

1
2 3 4 5
25