Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
0
votes
0answers
13 views

Certificate validation details. How it's done? [closed]

I've read this post where it says: "...an attacker can still take the whole signed content and present it to you but won't be able to change any details or the signature won't match." How ...
0
votes
0answers
22 views

Detecting a web based MITM attack?

I've been looking into ways to detect a Man In the Middle attack, when the client has "duped" into trusting third party CA. Examples of this are, anti-virus applications and corporate ...
0
votes
0answers
33 views

Server SSH fingerprint verification when authenticating with private key

Assume I passed on my public key to a service provider for them to set up a "new" server and configure it for private key authentication (instead of root password). Is the server fingerprint ...
0
votes
0answers
20 views

How do you debug a dns spoof in ettercap?

I'm new to man in the middle attacks, and network security in general. I was able to get a dns spoof to work once on this unsecure website: http://www.stealmylogin.com/. The other times I`ve tried the ...
2
votes
0answers
94 views

Why don't CAs advertize public keys of verified entities on a central location instead of giving out signed certificates?

If CAs (Certification Authorities) start advertizing public keys of verified websites via some API, browsers can simply query them for each domain instead of asking websites to give them certificates ...
0
votes
0answers
18 views

authenication of client in one way ssl [duplicate]

In below ssl diagram : I have one doubt with 1-way ssl. If there is an interceptor in-between client and server who can alter in following way : In step 8, when client is sending his symetric key to ...
0
votes
0answers
44 views

Why Man In The Middle (MITM) is not working with my router?

Man-in-the-Middle is not working with my router (Huawei) on my Windows machine/any device. But it works with another router on my same Windows machine/any device. When I doing MITM with Huawei router:...
0
votes
0answers
28 views

Redirect Ip Address (not dns) with Router [closed]

I have an IOT System that works the following way: The IOT bridge makes a TCP Handshake with a server in china with a static ip address 47.255... (bridge sends syn the china server sends syn ack and ...
0
votes
3answers
86 views

Can we check fingerprint with photos?

Let's assume an insecure communication channel. Alice makes a public key (we assume is PGP, but any asymmetric crypto could be used unless it doesn't have fingerprints for checking) and sends it to ...
1
vote
2answers
73 views

Burp Proxy vs MITM

I have recently started using Burp as a proxy for hunting bugs on websites and I see many submissions where people have intercepted and modified requests/responses to exploit certain logic flaws in ...
1
vote
2answers
74 views

Does HTTPS protect mobile internet connections against “network injection”?

The Star recently published an article describing an alleged attack against a Moroccan journalist. The article describes the attack as such: Forensic evidence gathered by Amnesty International on ...
0
votes
0answers
45 views

TPM and MitM during boot phase

I have just started learning on TPM 2.0 and something is not clear. During a measured boot, we send hashes to TPM to be stored / extended into PCRs. How does the link between the code that is executed ...
1
vote
2answers
97 views

Is it possible to craft a certificate signing chain that thwarts MITM corporate VPNs?

Some companies install software on corporate VPNs which also come with a root certificate installed on all employees' machines. This allows for encrypted traffic to be decrypted by technology ...
0
votes
0answers
73 views

SSH fingerprints(GitHub) differ when connecting to different routers

You can see that the two fingerprints differ, the second(nThbg6...) is the legit that can be found here: https://help.github.com/en/github/authenticating-to-github/githubs-ssh-key-fingerprints I ...
1
vote
1answer
117 views

Could a certificate authority and a ISP preform a MITM attack on HTTPS traffic?

I'm just wondering if it is technically possible for your ISP to work with a certificate authority (either compelled by a government agency or otherwise) to create a MITM attack to see into your https ...
1
vote
1answer
56 views

Forge certificate for man in the middle attack

I'm trying to analyze a SSLv3 connection. The certificate of the server has a "MD5 with RSA" signature. So I was setting up a local man in the middle attack by setting up a local DNS server that would ...
1
vote
2answers
90 views

Man-in-the-middle attack in SSH when attacker copies the public key

If an attacker is able to gain access to the public key on a host server, they can setup a different machine between the client and the server, and place the key there. When clients connect via SSH, ...
2
votes
2answers
59 views

Impersonation of TLS host with own wlan network

Problem: I have a local machine (IoT, lets call it MCC) which connects via SSL to a website (mcc.com) to get some JSON data. I would like to send modified JSON from my own server. Idea: Setup a local ...
3
votes
1answer
86 views

Is macOS installing known bad Certificate Authorities by default?

Today I was checking out macOS security and privacy guide, and when I looked at my keychain, I was surprised to find Startcom CA and Symantec CA trusted by default. Isn't this supposed to be ...
1
vote
2answers
121 views

What are the potential security risks of using a commercial VPN service?

Commercial VPN services are gaining a lot of popularity and some of them are heavily advertising their products on social media networks and technology magazines today. The advantages of using such ...
0
votes
1answer
72 views

MITM Attack on Gmail's SSL in 2011

I have read these posts: https://www.cnet.com/news/fraudulent-google-certificate-points-to-internet-attack/ https://support.google.com/mail/forum/AAAAK7un8RU3J3r2JqFNTw/?hl=en&gpf=d/category-...
1
vote
1answer
67 views

MitM Traffic with Burpsuite and a Mobile Device doesnt show up anything

I try to Man in the Middle the traffic of an App to a Cloud. For this purpose I use the Burp-Suite Pro Edition. What I've done: Setup a WiFi with an Alfa-Wifi-Dongle and create_ap; shared the ...
0
votes
1answer
67 views

How do I identify, characterize and detect if trusted CAs compromised?

What is the best approach to use in identifying, characterizing and detecting compromised CAs? I do not mean an invalid certificate or invalid CA that can be identified by an X.509 during validation ...
0
votes
1answer
41 views

Remote host identification has changed - How do I know if it's an attack or not?

When connecting using SSH to a shared hosting provider I'm regularly using, I got this message today: WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! IT IS POSSIBLE THAT SOMEONE IS DOING ...
32
votes
6answers
4k views

Is it possible for a name server provider to hijack MX records?

Let’s say: We buy a domain from http://cheap-unsecure-domains.example. Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service. We set some MX ...
0
votes
1answer
37 views

Spoofed DNS answers ignored by target machine applications

Attacker: Arch Linux Target: Windows 10 Scenario The attackers launches an ARP spoof attack to redirect all target traffic to the attacker. (This works) The target sends DNS queries for domain name ...
0
votes
0answers
133 views

Why does bettercap not capture any traffic and why is its web UI just a blank page?

I'm running Debian10/KDE with the nftables firewall enabled on my host machine and would like to test my phone. In the virtual machine I'm running Kali Linux with bettercap and am trying to sniff ...
0
votes
0answers
32 views

http websites not loading when im using mitmf

HTTP websites are not loading but I am seeing request packets when I use MITMF with the below arguments. python mitmf.py --spoof --arp --gateway 10.0.0.1 -i eth0 --log-level debug --target 10.0.0....
0
votes
2answers
75 views

Can the ISP (or anyone spying on my WIFI network) see which VPN IP I'm connecting to?

I know that even when connected to a VPN, the ISP (or anyone who controls my WIFI network) could see that I am connected to (A VPN brand), what I would like to know is would they obtain the exact IP ...
0
votes
0answers
27 views

Dsniff doesn't capture packets in MITM attack?

My first time doing MITM attack on my own network. I've used arpspoof to redirect the victim's (my another pc) traffic to my machine and I've enabled packet forwarding. To view the traffic I ran dsiff....
0
votes
2answers
75 views

HTTP Public Key Pinning vs Certificate Transparency, which is better and why?

We are rolling out a new mobile app. Our security team recommends us to pin the public key in order to avoid MITM. iOS already has CT checks and we can enable that for the Android app as well. The ...
1
vote
2answers
74 views

What kind of data can be monitored/intercepted/altered by the VPN service provider? [duplicate]

As you may know, Virtual Private Network or VPN is a system to create an encrypted tunnel between two computers on the internet, on one end is the VPN client, and on the other end is the VPN server. ...
1
vote
2answers
54 views

Security: Multiple VPN users

Let's assume there is a service provider that hosts some services behind a firewall. Two different companies connect to the network of the service provider via VPN. (To use the services that aren't ...
0
votes
4answers
2k views

Any way to avoid man-in-the-middle over http

If I have a web-page being sent over the Internet without encryption, anybody in the middle can change it. So if I put a public key of a server inside, the attacker can replace it with his own and ...
1
vote
0answers
29 views

How to capure my web browser's and any other programs' http requests on my own laptop using mitmproxy?

I am using mitmproxy on ubuntu 18.04 I know how to capture another devices' traffic on my wifi network. but I don't know how to capture http requests which are sent by programs in my own laptop (...
1
vote
1answer
227 views

sslstrip gives error “exceptions.AttributeError: 'int' object has no attribute 'splitlines'” when used with ettercap [closed]

I have 3 VM's running in VirtualBox. All 3 VM's are connected to a virtual network created from VirtualBox with the IP 192.168.56.1/24 For all VM's are configured Host only Adapter 1 Linux web ...
2
votes
2answers
264 views

Remmina RDP Certificate Fingerprint Changed

I've been using Remmina to connect to my RDP server across the internet. When I first connected to the server, I had to accept the certificate. I have not had to do that since the first time I ...
0
votes
1answer
74 views

Arp poisoning is disrupting the LAN

I'm poisoning my home network, I was able to do it 1 time. When i tried several more times to poison the wifi network or the cable network the "target" started to lose connectivity in both cases. ...
2
votes
1answer
61 views

What are the cons of dhcp snooping, dynamic arp inspection and ip guard?

I read about a couple of layer 2 protections against dhcp starving, mac and ip spoofing- ip guard, dhcp snooping and dynamic arp inspection. Are there any cons or vulnerabilies which enable bypassing ...
1
vote
2answers
176 views

Why Thunderbird has private IP address as remote host?

Why Mozilla Thunderbird configured to access Yahoo IMAP server, uses a private IP address, even if there is no other device in the network. Every time, Thunderbird is restarted, it changes remote-host ...
51
votes
6answers
10k views

Should a bank/financial service use external URL shortener services?

Say there is a bank/financial service that wants to have hyperlinks on their secure website/domain (or even in emails they send out to customers). In some of these links there are some long/obscure ...
3
votes
1answer
76 views

how to associate a public key with a user of a website

I need to generate a keypair for each user registered with my website. The user already has an assigned username and password (let's assume that these credentials were assigned to the user and that he ...
2
votes
1answer
271 views

Intercepting TCP traffic through MITM attack

I'm trying to capture TCP requests through Burp Suite with this hacky method. Basically it listens for user selected protocol requests (TCP/UDP) and then forwards them to Burp Suite (or any other ...
1
vote
2answers
89 views

Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?

Is blocking outgoing HTTP connections from a home network and only allowing HTTPS connections reasonable? Will it reduce the chances of a man in the middle attack?
0
votes
0answers
26 views

Can MItM repeat client's https requests? [duplicate]

Let's suppose that client is already have an established http session and he sends a single http POST request contains message 'Toggle like on post X'. This request will be encrypted by session ...
1
vote
0answers
37 views

How does BLE secure connection ensure man in the middle protection?

I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker. In contrast, in secure ...
0
votes
0answers
81 views

Man in the middle after evil twin

I've set up an Evil twin access point using the aircrack suite, what i'm missing is how to complete the man in the middle access point side like the picture shown below, I've been suggested ettercap ...
1
vote
1answer
87 views

What are some of malware-based MITM attacks that can compromise the organization when working remotely?

With the Coronavirus happening, employees use remote access to work remotely from not organizational laptop access to their VDI or remote access machine via company's web portal (e.g. SSL Portal VPN). ...
0
votes
0answers
59 views

WiFi channel-based man-in-the-middle attack implementations

Is there a working open-source implementation of a WiFi channel-based man-in-the-middle attack out there? I have been looking for it for a while and what I found so far was this python package which ...
1
vote
1answer
87 views

Possible to verify someone is a real person without direct connection?

I think the following is not possible, but I have no proof and would like to find out wether it is possible or not. Let's say in a network, every participant cannot connect to each other participant ...

1
2 3 4 5
24