Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

wifi tap interface not working

I want to ask about my lab "Man In The Middle". I can create at0 with airbase-ng --essid mitm -c 11 wla0. My wlan0 is adapter 8188us but I can't ifconfig at0 up with this error at0: ERROR ...
user avatar
0 votes
2 answers
90 views

How do IoT devices know the checksum of firmware upgrades?

As I understand, some IoT devices verify the integrity of firmware updates downloaded from the internet using the checksum of the file before installing the update, making it impossible for attackers ...
user avatar
  • 3
0 votes
0 answers
11 views

Is There an MITMf ScreenShotter plugin for modern tools like bettercap?

I am looking for a plugin like the ScreenShotter , which is capable of capturing a screen shot of other local network connected devices opened browsers pages using html5 canvas A demo of ScreenShotter ...
user avatar
0 votes
0 answers
14 views

Is the rolling jam attack considered a MITM attack

As far as I understand, the rolling-jam attack involves eavesdropping, signal blocking and replaying. Does that qualify it as an MITM attack? Could one say that the attacker is controlling the traffic?...
user avatar
0 votes
1 answer
73 views

How to perform MitM against SSL/TLS when certificate owned?

Performing a local network man-in-the-middle (MitM) attack is fairly straightforward, especially when the traffic is unencrypted HTTP. There are other approaches to encrypted SSL/TLS HTTPS connections,...
user avatar
0 votes
1 answer
38 views

Burp suite: URL encoding of request body - Is this safe?

Analyzing an android app's traffic POST request, it sends some important pieces of data in the form of URL encoding. This is pretty easy to decode and get the data. The data is sent over HTTPS. But is ...
user avatar
0 votes
2 answers
123 views

How is man-in-the-middle attack prevented in TLS? [duplicate]

As I understand the original master key, which is used to encrypt the application data is never transmitted over the wire and it is calculated on both client and server individually using a hashing-...
user avatar
  • 101
0 votes
1 answer
47 views

Redirect client to no SSL as MITM

I'm pen testing a setup where I have an AP that I control (using wifipumkin3) and DNS spoofing to redirect the known endpoint for a firmware update. When the device requests for an update, I'm ...
user avatar
  • 11
1 vote
0 answers
29 views

Getting 'cannot verify server identity' only on wireless LAN. Is this a MITM attack?

I am getting the notification 'Cannot verify server identity' for every single website I try to open on an iPhone. This, however, only happens when connected to a certain WLAN. On mobile internet this ...
user avatar
0 votes
0 answers
21 views

DNS spoofing an API? [duplicate]

Could someone DNS spoof REST API communication between a client device POST to a server URL running a XML-based API on HTTPS? If a man-in-the-middle for client device(s) POSTing to the server on a ...
user avatar
  • 101
-1 votes
1 answer
48 views

Credentials in a POST body over https are visible [duplicate]

Hey so am new to pentesting and I learnt that using https makes the traffic encrypted so hackers cannot decipher credentials passed in a body for example in a login page or read the traffic properly. ...
user avatar
0 votes
0 answers
67 views

Is it possible that data is still encrypted even when you intercept TLS? [duplicate]

I've recently set up a mitmproxy on my phone and it seems to work fine. It intercepts that request for https websites and I can view their content. But I'm trying to intercept data from a banking app ...
user avatar
  • 1
0 votes
0 answers
41 views

How network segmentation affects network monitoring/MITM and interconnectivity of devices

How does network segmentation affect network packet sniffing, man-in-the-middle attacks and interconnectivity of devices? I am mainly interested in understanding the possibilities of network malware ...
user avatar
  • 33
1 vote
1 answer
59 views

MITM in Tor: Authentication when an Entry node is sending data back to the Client

Diagram: Server -> Exit Node -> Middle Node -> Entry Node -> Client In Entry Node -> Client, how does the entry node authenticate that the receiver is a real client but not a MITM?
user avatar
1 vote
1 answer
40 views

How are session keys transferred between a client and a server?

Session keys are generated during TLS handshake and are transferred from clients to server through asymmetric encryption FOR ONCE. However, I have heard that session keys are single-use, which mean a ...
user avatar
1 vote
1 answer
84 views

Possible rogue admin monitoring my online activities

I teleworked for a medium-sized software company. We had a network architect who offered me a firewall to install so I could securely access on-premises resources and play around with some ...
user avatar
0 votes
1 answer
326 views

TLS ClientHello leaks http Host header

As already discussed on this Platform, TLS Client Hello messages are not encrypted, since they contain "no sensitive data". When sniffing HTTPS requests with wireshark, I can see the Domain ...
user avatar
0 votes
0 answers
43 views

Overlap between Wired vs WiFi vulnerabilities

This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections. What are the attacks that both wired and Wi-Fi ...
user avatar
0 votes
2 answers
133 views

Did HTTPS and HSTS kill MITM?

Is there a point in being MITM nowadays since HTTPS makes it impossible to make sense of sniffed data and HSTS prevents SSL stripping?
user avatar
2 votes
1 answer
133 views

Reverse Shell for managing unreachable remote computers

In the near future, I will have about 50 remote computers to manage. These will be physical PCs running Debian 11, distributed all over the country. They will automatically perform a special kind of ...
user avatar
  • 123
0 votes
0 answers
42 views

What's the security implications of briefly connecting to a public wifi

Case study: Amazon Fire Stick accidently connects to a BT (UK "ISP") Open WiFi with no security. Upon connecting, the login screen of BT portal is presented, however, the user realising ...
user avatar
2 votes
1 answer
324 views

Isn't having multiple TLS certificates for a domain name a security problem?

As far as I understand, it is possible to have multiple TLS certificates per domain name. Let's say I own example.org website and have a certificate for it. If an attacker gets a certificate for ...
user avatar
0 votes
1 answer
78 views

How to MITM an http website without infiltrating any infrastructure?

There's a certain website designed so that junior QAs learn to find bugs. Trouble is: it's http:// there's no IP filtering users are very junior so they use their real names as user names and ...
user avatar
  • 1,817
7 votes
2 answers
3k views

How to prevent HTTPS man-in-the-middle with self-signed certificates?

I came across this issue when we implemented a new security solution. Said solution has its own root CA certificate and will create certificates for HTTPS web pages "on the fly". Each HTTPS ...
user avatar
  • 79
-1 votes
1 answer
114 views

Prevent server MITM attack

I want to create a secure messaging application such that you don't have to trust the server. Register with username and password. -> Generate a pair of PGP keys (RSA). -> Encrypt the private ...
user avatar
  • 1
0 votes
3 answers
136 views

Possible MITM attack on remote server administration

I have an HP Proliant server. I have been using it for several years. Sometimes I used its iLO web interface via WAN (I have forwared required ports) completely ignoring all warnings from my browser ...
user avatar
0 votes
1 answer
104 views

Prevent TLS inspection by using TLS nested inside of TLS

Say that I have a program that needs to communicate with my own server. I use TLS to secure the connection, however the program is running within a network, which sends all TLS traffic through a TLS ...
user avatar
  • 157
0 votes
1 answer
67 views

Can a secure MitM-free channel be established between two peer "strangers" in the presence of an active adversary?

This excellent question introduces "TOFU" (trust on first use - e.g. SSH storing fingerprints) and "TBFU" (trust before first use, e.g. PKI Certs, WPA pre-shared-keys). Can MitM ...
user avatar
  • 1
0 votes
0 answers
59 views

Suspicious Whonix Gateway SSH connection

I downloaded Whonix xfce-16.0.3.1 QEMU/KVM checked the integrity sha256 and installed it in Devian ASCII. Changed user and passwd. When starting the Gateway only an SSH connection takes place to the ...
user avatar
3 votes
3 answers
223 views

Are TLS v1.3 connections over open Wi-Fi secure?

If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic. But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
user avatar
0 votes
0 answers
103 views

How wifi network MITM works?

I have seen a lot of tutorials showing how to MITM a network using various tools. But it usually says that we require a network adapter with monitor mode options. I own my wifi router and can connect ...
user avatar
2 votes
1 answer
839 views

Is it secure to share a public (RSA) key over http?

The following scenario: We have a HTTP (not HTTPS, so unencrypted) server which contains an open (RSA) public key. The general sharing of the public key should not be a problem since it is the public ...
user avatar
1 vote
2 answers
329 views

What are possible implications of ignoring the ssh host key warning?

With password authentication you're basically giving your password to the attacker. At least that is my understanding. What about public key authentication? I hear that a private key never leaves your ...
user avatar
  • 257
1 vote
1 answer
128 views

Does the lack of a secure channel really allow a replay attack to HOTP?

RFC 4226 on HOTP (7.1 Authentication Protocol Requirements) says RP3 - P [the protocol] SHOULD be implemented over a secure channel in order to protect users' privacy and avoid replay attacks. But ...
user avatar
  • 137
0 votes
1 answer
77 views

"Mutuality" of public key authentication

I'm a newbie when it comes to cryptographic security, but there's something I'm not quite getting concerning the "mutual" aspect of public key authentication. Say you have a client X, and ...
user avatar
  • 115
1 vote
1 answer
83 views

Simple Key Exchange, One Server

Posted this on Cryptography; reposting here in case it's more relevant. I am trying to better understand how TLS works. I understand in the normal use case you need various random values generated and ...
user avatar
  • 187
3 votes
1 answer
464 views

SSH Agent Forwarding - What are the best practices and current security issues?

Using agent forwarding comes with a risk, but stored private keys can also abused if the attacker has compromised the remote machine. In this thread I want to discuss, if agent forwarding is save to ...
user avatar
15 votes
3 answers
3k views

Can an HTTPS request be sent twice?

When sniffing network traffic, one can see an HTTPS packet and all its (encrypted) data. I am wondering what would happen if this packet is copied and then re-sent. Is there a protocol at some layer ...
user avatar
  • 161
0 votes
0 answers
130 views

Why my certificate does not have OCSP must-staple extension even when CSR contains it, is OCSP must-staple still used?

We received recently security report with [low] security issue: Missing "Must-Staple" extension on certificate. With help of old article oscp-must-staple I managed to create CRA with ...
user avatar
0 votes
1 answer
156 views

How google is protecting the MITM attack

If we intercept Google account creation form using burp and change any form data, even a single character in the first name and forward the request will result in to "Some thing went wrong" ...
user avatar
2 votes
2 answers
161 views

SSH: MITM attack during fingerprint verification?

The first time I connect via SSH, a "fingerprint" appears. How can I be sure that it belongs to my server/router/etc. and has not been tampered with by a fraudster (MITM)? For example, for ...
user avatar
  • 21
1 vote
1 answer
111 views

Could a bad actor get hold of your credential sent via https if you are connect to their fake network?

Imagine this typical Fake WiFi scenario: A bad actor creates a fake coffee shop Wifi and therefore is in full control of the network. An unsuspecting victim would connect to the Wifi and log in to ...
user avatar
0 votes
1 answer
131 views

Could having intermediate CA not installed to trust store be a vulnerability?

I've read through several articles and posts here and on other resources and I'm still confused. Say I have a key pair, and I got a server certificate for my public key from some trusted CA. Now I'm ...
user avatar
  • 103
1 vote
1 answer
362 views

How can someone on the same GPON splitter network sniff my internet traffic?

I currently have a fiber optic internet connection at home. My ISP uses GPON where the ONU acts as a gateway device which has a direct fiber optic connection to it. ONU is a Huawei HG8145V5. I ...
user avatar
0 votes
1 answer
244 views

Intercepting responses using mitmproxy in Python. Problem in decryption

I have set up MitmProxy with a Python script to intercept network responses from one domain, used by a Desktop App. However, when I start up the App, I get the following series of transactions { &...
user avatar
0 votes
0 answers
22 views

MITM attack on public wi-fi and ISP wired connection [duplicate]

I know how MITM attacks work (theory/videos on the subject etc), but I am a bit confused and not sure what are the worst-case scenarios that can happen. If I'm using a public VPN and someone is indeed ...
user avatar
0 votes
1 answer
138 views

How to prevent server know what data is being transferred through it between two clients

Imagine a web application in which two computers can communicate with each other by transferring files, through the server linked with some unique password. Every file sent between the clients are ...
user avatar
0 votes
2 answers
156 views

Tool for injecting data in existing tcp connection

I would like to perform arp spoofing on an existing tcp connection between a server and a client and perform a mitm attack. In addition to altering existing packets, I would like to be able to inject ...
user avatar
0 votes
2 answers
122 views

With Network Security Systems Decrypting SSL traffic to scan for Malware Is Server-Side hashing of Credentials Still Enough?

I am not a Security Expert by any means. Nor am I a Cryptographer. That's why I'm here. After discovering that the server side of some software I work on was operating on plain text passwords (though ...
user avatar
0 votes
0 answers
102 views

Possibility of Man-in-the-middle Attack on Homebrew

It has been brought up in the past that package managers such as pip are vulnerable to man in the middle attacks (see https://www.reddit.com/r/Python/comments/17rfh7/...
user avatar

1
2 3 4 5
26