Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

What kinds of attacks are eliminated in WPA2-PSK if for each device there's a different (secret) PSK?

With regular WPA2-PSK there's the fact that every device shares the same PSK, hence it's possible to impersonate the AP by setting up an Evil Twin and watching the traffic. This isn't possible without ...
Facundo's user avatar
  • 71
0 votes
0 answers
36 views

What is the security impact of disabling certificate check [duplicate]

I have this line of code in a client server project: sslContext.init(null, new TrustManager[]{new TrustAnyManager()}, null); A security guy pointed out that this is skipping the validation of the ...
anonymous's user avatar
0 votes
0 answers
30 views

In TLS, how are the Diffie-Hellman exchange parameters protected from a MITM attack? [duplicate]

Authentication alone will not stop a MITHM from intercepting and modifying plaintext exchanges, since he can let the authentication occur, then begin modifying the exchange data and neither end will ...
Michael's user avatar
  • 23
0 votes
1 answer
99 views

Can a VPN company perform a MiTM attack if SSL Pinning is in place?

Recently, I read news about Facebook acquired the Onavo VPN company to monitor Snapchat users' traffic. It seems they executed a Man-in-the-Middle attack by replacing the certificate. But could they ...
Robert Zunr's user avatar
1 vote
2 answers
53 views

Preventing Data Tampering in HTTPS Requests: Safeguarding User-Initiated Donations

Could a Man-in-the-Middle (MITM) attack compromise the integrity of user-initiated transactions over HTTPS? Specifically, if a user selects an amount to donate on a website, is it possible for a ...
user23570085's user avatar
0 votes
2 answers
89 views

How to Capture Mobile API Requests in burp when Server side pinning is implemented

I recently encountered a scenario where Mobile Application is generating CSR request, call a POST API request and in response, Ask Server for certificate. Server will respond with the temporary ...
Tejas Pandya's user avatar
0 votes
2 answers
96 views

Is a MITM attack possible for my apt repo?

OS is Debian. Imagine I have my own apt repo set up inside a private network. This repo is set up to provide a single package to other servers on this network. I can easily create a signing key for my ...
cat pants's user avatar
  • 101
0 votes
1 answer
92 views

Fake access-point + custom DNS-server to intercept mobile app credentials? [duplicate]

Would it be possible to create a fake twin access-point for a router with a custom DNS-configuration in a way to fool mobile apps like for example Instagram to send authentication requests to my own ...
O'Niel's user avatar
  • 2,914
4 votes
2 answers
629 views

securely tunneling through a MITM proxy

I am wondering if there is a practical way to establish a secure, encrypted network connection through an MITM proxy given the ability to communicate secrets out-of-band with a second, external proxy. ...
Aryeh Leib Taurog's user avatar
0 votes
0 answers
54 views

Decrypt TLS (DHE cypher) inside of TDS (Microsoft SQL Tabular Data Stream protocol)

Is there a possibility to decrypt TLS data encapsulated within TDS Microsoft TSQL protocol? The TLS handshake seems to occur within TDS data, right after the TDS pre-login The handshake itself is ...
mouch's user avatar
  • 113
0 votes
1 answer
115 views

It is possible to receive ntlm response with ipv6. What about ipv4?

I performed ntlm relay attack with mitm6 and ntlmrelayx. I used mitm6 for dns spoofing. When the victim sent a query containing where the DHCP is located, I identified myself as the DHCP server. Then ...
Firat's user avatar
  • 13
2 votes
0 answers
95 views

Does DNSSEC prevent man-in-the-middle at all? [duplicate]

I just watched a video on DNS that explained that if there is a man-in-the-middle or if someone has taken over your resolver, DNSSEC can prevent the responses from being tampered with because the ...
Nasso's user avatar
  • 23
0 votes
1 answer
300 views

Why can't we encrypt twice instead of having Cloudflare MITM half the internet?

First of all I want to address a thought I had which is that they might market their ability to read the encrypted code being sent so they can spot "bots" and such, and that this is why they ...
Henrik F's user avatar
0 votes
3 answers
187 views

Does TLS interception necessarily require a self-signed certificate? Please explain why

A brief schema of a TLS intercepting proxy - the Client connects to the Host via the Proxy in a way which allows the Proxy to perform a (consensual) MITM. [Client] -> [Proxy] -> [Host] It's ...
bbozo's user avatar
  • 511
0 votes
0 answers
116 views

Intercepting Android App: Google detects burp proxy and block the request to app

I was recently doing bug bounty on a website and found it also has an app so i tried to pentest on it using burpsuite via MITM and intercepting it through burp proxy Though my request got blocked by ...
Dang Max 2.0's user avatar
0 votes
0 answers
150 views

Router level SSL Inspection

Is there any way I could inspect the traffic from an untrusted device connected to my network? I would like to get a router that has ssl inspection capabilities, where I could check the https packets ...
Paul's user avatar
  • 1
1 vote
0 answers
74 views

Triple handshake (TLS) EMS protection against attacks

In TLS we have such an extension as EMS (extended master secret). It has been applied to protect the master secret. But I don't understand how it helps against triple handshake attack. I assume that ...
panda's user avatar
  • 11
1 vote
1 answer
131 views

Is FIDO authN vulnerable to relay attacks?

In this question: Is FIDO2 authentication vulnerable to a social engineering replay attack? it was answered that no, not vulnerable because "the keypair used to by the FIDO device to authenticate ...
Allexj's user avatar
  • 137
40 votes
2 answers
11k views

Did a Huawei modem just try to do a Man-In-The-Middle attack on me?

I have a replica of Huawei B535-333 LTE modem. While I was working from home on my computer I randomly got a security alert saying that certificate for connection with outlook.office365.com was issued ...
gtu's user avatar
  • 503
3 votes
1 answer
213 views

Modern VPNs and average MITM attacks

I am trying to untangle a number of concepts (all of which i am unfamiliar with) in this question, but they all point to a seemingly basic question; With modern tunneling protocols, SSL ciphers and ...
myol's user avatar
  • 175
0 votes
0 answers
126 views

MITM with forwarding between 2 hosts in the same network

I have 3 hosts in the same network, let's say their IP addresses end with: .10 (Host A) .11 (Host B) .12 (Host C) I want to sniff packets between A and C through host B, so that host B acts as MITM. ...
SempriGno's user avatar
0 votes
0 answers
155 views

Man in the Middle Attack for OAuth 2's Authorize endpoint

We all know that the /authorize endpoint is a standard endpoint of OAuth 2. Below is how it's commonly called: GET /oauth2/authorize?client_id={client_id}&redirect_uri={redirect_uri}&...
Joms DV's user avatar
3 votes
2 answers
2k views

Understanding TLS Protections Against DNS Spoofing and Fake Websites

What protections does TLS use in the above scenario? In the picture, the client asks the attacker for the address of Google.com, but the attacker gives them a different ip address which redirects to a ...
F0calPoint's user avatar
0 votes
2 answers
169 views

Website returns different certificate on my home network to mobile hotspot

This is a "should I be worried" question. I access a website on my laptop via my home network/router. My Edge browser gives me a "Your connection isn't private" warning page and ...
Kepboy's user avatar
  • 101
0 votes
0 answers
135 views

Bettercap filtering ARP Spoof

I want to see only monitored device's visited websites not the methods and the redirects how can I filter or can I?
Kafası Güzel Penguen's user avatar
0 votes
0 answers
80 views

Securing an internal tcp proxy

I am developing a TCP-Proxy in C#/.NET using dotNetty (Port of Netty). The proxy is translating messages between two different systems. It will be hosted on a server in the company network, so it is ...
f.lechleitner's user avatar
0 votes
1 answer
430 views

Can China decrypt SSL as soon as people using their ISP?

While these VPNs can work inside of China, I wonder how private and secure they are since China is known for its great firewall, like most technically advanced countries. Are these methods working? ...
Maxfield's user avatar
  • 127
0 votes
1 answer
399 views

What is the difference between a VPN and a Tor Socks proxy on public wifi?

I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi. So, what are the different security impacts of each of these 2 solutions: Using a VPN (like Proton VPN) to ...
John's user avatar
  • 1
0 votes
1 answer
165 views

Evading authenticated diffie hellman with MITM

I understand that in a non-authenticated Diffie-Hellman setup, a man-in-the-middle attack can occur. Now i'm curious about the feasibility of the following scenario: Let's assume a situation where www....
SempriGno's user avatar
0 votes
0 answers
96 views

Could a trusted CA pretend to be me and run a MITM? [duplicate]

Sorry for the basic question, I'm still wrapping my head around the ins and outs of SSL and asymmetric encryption. In order to better test my understanding, I was considering the following thought ...
fruitless fruit juice's user avatar
0 votes
1 answer
235 views

Is Certificate Pinning safe and worthwhile for an API server that will only accept requests from an android application?

I have hosted an api on an AWS Windows server, imported ssl certificates from a known CA, and made https mandatory. Then built a client app that is an executable, then pinned the public key hash for ...
Subham Burnwal's user avatar
1 vote
0 answers
79 views

MS-CHAPv2 Auth protocol downgrade

I'm researching about PPP (Point to Point protocol) and it's security aspects. While exploring PPP Authentication I've noticed possibility for security downgrade attack. Generally authentication ...
Zduniusz's user avatar
0 votes
0 answers
377 views

Every time I log into Facebook, the SMS based 2FA code appears to get intercepted (UK)

Historically, whenever I logged in I got a standard looking text from "Facebook" stating my login code. As of this morning, when I attempt to log in, I get a fake looking text from a random ...
ReflexReaction's user avatar
0 votes
1 answer
230 views

can a VPN provider do DNS poisoning?

I was wondering if we push our DNS over the VPN and basically let them do DNS resolution, is it possible to perform DNS poisoning and man in the middle attack on us? I know browsers check certificates ...
Naadiyaar's user avatar
0 votes
2 answers
201 views

What prevents certificate authorities from issuing fraudulent TLS certificates?

There have been reports of attacks against certificate authorities resulting in the issuance of fraudulent TLS certificates for sites such as google.com, yahoo.com, and skype.com. These attacks seem ...
Gilgamesh's user avatar
0 votes
1 answer
113 views

Suitable method of encryption for user-hosted chat platforms

I am considering how to make my chat application a bit more secure. It has a similar structure to IRC, multiple users can join each server, and servers can be hosted by anyone. I have been using TLS ...
Jachdich's user avatar
  • 103
1 vote
2 answers
677 views

How does the MITM attack work when a client does not check the hostname vs the certificate? [duplicate]

One of the Paho MQTT client SSL options allows checking whether "a certificate matches the given host name.". If I enable this option then I cannot establish a TLS connection to MQTT using ...
user26671's user avatar
2 votes
1 answer
867 views

CSRF: Signed Double Submit Cookie & 'Referer' validation vs MITM and vulnerable subdomains

I have been researching various techniques for preventing CSRF attacks, such as SOP, SameSite, Secure, Referer validation, and CSRF Tokens, and their potential bypasses. During my research, I ...
Advena's user avatar
  • 129
2 votes
4 answers
283 views

Using FIX over TLS, is there a need to sign FIX mesages?

We have 2 servers communicating, server A (a server that I own), and server B (server on the internet that I trust). I get some info from server B, which are FIX messages (https://en.wikipedia.org/...
ethicalhacker's user avatar
1 vote
0 answers
138 views

Malicious Mass Email Attack Occurred, Do I Still Have Problem?

I'm using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "[email protected]". It was used as a "From:" email in a mass email attack. ...
python_mainly's user avatar
2 votes
1 answer
124 views

TLS and MiTM Attacks Relevancy over Public Cloud (SDN) internal networks

Edit: To clarify, this question is all about whether we should insist on implementing TLS for internal communications over public cloud tenants as a man-in-the-middle risk reduction control, given the ...
NetworkNewbie's user avatar
0 votes
1 answer
198 views

How to safely share data between 2 SPAs?

Let's say I have 2 SPAs (single page applications), SPA A and SPA B. I want to share data between the 2 applications for an end-to-end flow. How can I safely share data such that it would not be ...
Adam Thompson's user avatar
13 votes
1 answer
4k views

SSL issue captures Facebook app send out traffic

I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis. I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...
ThanhLam112358's user avatar
0 votes
1 answer
112 views

Misuse of trusted certificate authority [duplicate]

Currently I'm working with mitmproxy and intercepting some HTTPs traffic using it. Before I could use it in my browser, I had to trust the certificate via my OS settings. After that, the certificate ...
TrueStar's user avatar
0 votes
2 answers
253 views

Protection against user session attacks (hijack, replay, tampering, CSRF, XSS...)

We develop a website in JAMStack, all URLs are static HTML page, and each interaction with the server are made by a fetch call on our REST API (micro-services). When a user sign in, we want to ...
lakano's user avatar
  • 157
0 votes
0 answers
74 views

Why encrypted internet connections can't be censored or blocked by a country willing to do it? [duplicate]

Is it possible for a country to restrict any encrypted internet connection to some computer outside of the country, or if absolutely necessary just use a mitm(man-in-the-middle) to guarantee they can ...
user289211's user avatar
0 votes
3 answers
246 views

How to make Firefox warn about unknown certificate issuer?

Assume a corporate computer that has intrinsic software installed. It's a mitm setup that replaces the web page's certificate to one signed with a intrinsic software vendor's certificate that is ...
eltomek's user avatar
  • 101
0 votes
1 answer
582 views

Why installing a root certificate on the client opens a door for MitM attack?

Most internet communication is now end-end encrypted using TLS. In the TLS process, the TLS server sends a PKI certificate to the user which then gets authenticated using the CA's root certificate ...
lll's user avatar
  • 3
2 votes
1 answer
268 views

How to decrypt Emotet's TLS traffic by MITMProxy

I have a question about Emotet's TLS traffic: Using MITMProxy, I have successfully decrypted TLS traffic with Emotet's C2 server and can read the contents of the traffic. https://mitmproxy.org ...
mokotan's user avatar
  • 21
4 votes
1 answer
567 views

Some ISP inject malware/ads into my website in the middle of transit

I host my website by my own using droplet/VPS service and node.js server. My wesbite uses SSL Cert/HTTPS from LetsEncrypt, VPS service from DigitalOcean, domain registered from local vendor (RumahWeb) ...
DennyHiu's user avatar
  • 143

1
2 3 4 5
28