Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

0
votes
1answer
36 views

What are MITM proxies used for in enterprises?

My company (like many others I assume), uses a "man in the middle" proxy with a personal root CA. Disclaimer : I'm not a security expert so perhaps I do not correctly understand what this network ...
1
vote
1answer
59 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
0
votes
2answers
75 views

How to check Google SSL certificate?

I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine. I wonder, how do I know the certificate I have is legit? That is, ...
1
vote
0answers
46 views

ARP spoofing doesn't work as expected?

I have seen products like CUJO (https://www.getcujo.com) and Firewalla (https://firewalla.com/) doing ARP spoofing for network filtering and device blocking. As far as know, simplest way to ...
-1
votes
0answers
36 views

Any way to bypass a http proxy filter [closed]

Our education ministry has a very strict internet filter. After I tried nearly every possible ways, I think I found the filter they are using. They block unencrypted webpges by blacklist. But when I ...
2
votes
1answer
83 views

Publishing a private key used for HTTPS certificates, is it ever OK?

I want to make it easy for users who have private servers to connect to those servers inside their LAN from Android devices. I want to avoid having these users perform configuration tasks like, ...
0
votes
0answers
124 views

Emulate a phone number to receive SMS?

I would like to perform some registrations on a website sending SMS code to verify identity on each registration process. Free SMS sites are flagged. Is there any way to choose a random phone number ...
57
votes
4answers
9k views

Is there a way to make sure my government does not swap out SSL certificates?

I was recently wondering whether there exists a way to make sure my government is not swapping out SSL certificates in order to intercept the traffic. I know almost all browsers are complaining in ...
0
votes
0answers
25 views

Distributed network with one host behind dmz and the other without

Context: This a question from my homework assignment. There is a company with two sites A and B. B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall Network A ...
1
vote
0answers
45 views

Is secured WiFi with a publicly available password any safer than open WiFi? [duplicate]

Modern security training take the same principle that sex Ed videos took when I was in school -- scare the viewers into never taking a chance. Our corporate training suggests to never connect to any ...
0
votes
0answers
41 views

DNS spoofing using MITMF

Is there a way to redirect all requests to a single website? I'm using MITMF to do the DNS spoofing and here is what I have: [[[A]]] # Queries for IPv4 address records *.(website request)=(ip to ...
0
votes
0answers
58 views

Man in the middle-attack

I'm trying to do a MITM-attack on my Ubuntu platform. After some searching arounf at the internet I'm doing everything correct as follow: sudo arpspoof -i wlan0 -t Victim-IP Router-IP sudo arpspoof -...
1
vote
1answer
45 views

Updating computers over unsafe connections

If an attacker manages to get control of one of the devices managing or routing internet traffic along or on my network, e.g, a compromised router or femtocell/IMSI-catcher for mobile internet, how do ...
1
vote
1answer
133 views

Bettercap 2.x SSLStrip Is Not Converting Links

I posted this before. I am creating a new post because of all the changes I would need to [edit] out. I have the latest version of bettercap. I have the latest version of Kali Linux using the latest ...
1
vote
1answer
191 views

Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)

I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
1
vote
1answer
61 views

Certificates for localhost, MITM Attack

Excerpt from https://letsencrypt.org/docs/certificates-for-localhost/ You might be tempted to work around these limitations by setting up a domain name in the global DNS that happens to resolve to ...
2
votes
2answers
75 views

How to protect API endpoint from abuse in mobile App?

Let's assume I have a mobile app that fetches the news feed from an url on my server. GET/ https://example.com/api/v1/newsfeed Is there a way to restrict the access to this endpoint to only from ...
0
votes
1answer
75 views

Which type of authentication is not prone to man-in-the-middle attacks?

I am preparing for the CISA exam and come across material saying "challenge response-based authentication is prone to session hijacking or man-in-the-middle attacks". But the material doesn't mention ...
1
vote
1answer
86 views

How to prevent MITM DNS attack by router [duplicate]

My landlord is very much a busybody and he has extreme political views. I suspect he is using a Windows program that communicates with the Wifi router to record what websites all the tenants are ...
0
votes
1answer
336 views

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop). To do this is run Kali Linux in a ...
3
votes
3answers
360 views

Suspicious “100% guaranteed” web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
0
votes
2answers
724 views

How to eavesdrop and decrypt the HTTPs communication of an IoT device?

I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
1
vote
1answer
60 views

How to avoid man in the middle attacks when sending sensible info via email?

I'm setting up a website where users can buy cupons. I should send coupons codes to customers via email and these codes are enough to use the coupon. How can I avoid man in the middle attacks? Do you ...
0
votes
1answer
69 views

Socks5 proxy: Danger of MITM malicious injection wget/ httrack?

I occasionally use HTTrack or wget on Linux to clone and archive websites for offline viewing. I use proxychains and a random socks5 proxy I find in those proxy lists on the Internet. The websites I ...
1
vote
1answer
50 views

SSLSPLIT not working with WSS

Is there a way in SSLsplit through which we can bypass WSS over 443? Slack and a lot of other websites are not working correctly.
0
votes
1answer
26 views

Is there any other way through which an attacker can obtain user data from HTTP response except MITM and CORS attack?

I am doing some research for my college project and I want to ask is there any other way through which an attacker can obtain data from HTTP response except MITM and CORS attack. For an example, If I ...
1
vote
0answers
53 views

How can a 802.11 client verify the authenticity of an AP it is trying to connect to?

With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
2
votes
1answer
61 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
1answer
63 views

Can my VPN provider see my browsing activities on SSL sites? [duplicate]

I gather they can probably see everything if they want to on non-SSL sites but how about on SSL sites, can they do it?
2
votes
0answers
134 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
1
vote
0answers
18 views

Google search results hijacked locally / displaying moot in all browsers [duplicate]

So, since yesterday I have quite obviously caught something that Windows Defender doesn't recognize. Symptoms: All Google services suffer from Ad injection (non-YouTube ad overlays that cannot be ...
2
votes
2answers
37 views

Secure authorization for subscription-based games or services

Let's suppose I'm developing a subscription-based desktop game: the player pays a fee in order to get access to certain levels of the game for a certain time. For example, the player pays $1 to get ...
0
votes
1answer
101 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...
0
votes
0answers
20 views

Is there workaround for a man in the middle proxy using Shell in a Box?

I noticed at my customer's organisation that there is a proxy breaking the https flow. Certificates do not belong to the https web site, but to the organisation itself. They are using it for scanning ...
-1
votes
1answer
103 views

Surveillance by mobile network provider

I am customer of Vodafone Germany as my mobile network provider. After extension of my RED S mobile contract i realized, that the option "Vodafone Secure Net" is enforced by the company without ...
2
votes
1answer
159 views

What are the benefits to HTTPS between two servers I control?

The current setup we have is two servers that are held internally in my building. One of these is only accessible internally, the other is public facing. The internal server communicates with the ...
-1
votes
1answer
63 views

Deducing private key in RSA encryption from public key, cyphertext and plain text

Assuming someone is doing MITM attack. He knows the cyphertext, the public key and the plaintext message, can he deduce the private key from these 3 elements?
1
vote
2answers
117 views

Hide ports being knocked during Port Knocking

A while ago I wrote an article about implementing Port Knocking using iptables. Later in the post, I also talked about making this mechanism more secure. The way it works is that in order to open a ...
1
vote
0answers
35 views

How to prevent “man in the middle” attack over complete reseting a secure usb stick?

I have an Aegis Secure Key from my org, I only create the 'User PIN', and do not own the 'Admin PIN' and this device is set to 'READY ONLY' mode by the administrator. I need read many confidential ...
2
votes
1answer
77 views

After performing a SSL strip, can you upgrade back to HTTPS with your own encryption from the proxy?

Let's say you are performing a SSL strip. From what I can understand, it modifies either the client or server packets (in the http/https protocol), which indicate that it supports encryption to not ...
0
votes
1answer
197 views

Android & Man In the Middle — how did Fox News do it?

A couple years ago Fox News aired a short clip on how smartphones track and upload user location/physical state data. The clip is freely available on youtube and it shows how two Android smartphones ...
1
vote
4answers
224 views

Can a rogue wifi network install a CA certificate? [duplicate]

Could an attacker create a false wifi network, then force (either via the user exploitation or other means) CA certificate install to the browser, allowing them to use something such as Burp Suite to ...
6
votes
3answers
147 views

Is there any risk from attempting ssh authentication to a rogue server?

Suppose I'm about to connect to a new (unauthenticated to me) server. I've previously provided my ssh public key to the server owner (who populates it in the appropriate authorized_keys file). The ...
1
vote
1answer
117 views

Websocket VPN and MitM Gateways

A number of solutions [1] are available for tunnelling IP over Websockets to masquerade a VPN as browser traffic. How well are these connections isolated though? Specifically, if the browser happens ...
3
votes
1answer
128 views

What could MitM'ed U2F do?

Google has now released their "Titan" keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth: ...
-1
votes
5answers
301 views

Is encrypting data once enough? [closed]

If I encrypt my data and want to send it from point A to point B, is the end to end encryption is necessary? Although it's dependent on a) the encryption method and b) my security policy but is one ...
1
vote
2answers
71 views

How to authenticate using RSA avoiding MITM attacks

During my lessons of information security the professor told as that Alice can authenticate to Bob in the following way using RSA: Bob generates and sends a Nonce to Alice Alice signs this Nonce with ...
2
votes
1answer
141 views

Certs stop hackers from pretending to be a server. What stops them from pretending to be you?

Reading this answer on stackoverflow, I understand that certificates help identify that a public key and encrypted data are indeed sent by the one we're talking to. However, the data I send back to ...
1
vote
1answer
103 views

ettercap filters - drop the packet and inject packet

if (ip.proto == TCP) { if (tcp.src == 2404 || tcp.dst == 2404) { if (DATA.data+6 == 0x64 && DATA.data+8 == 0x07) { msg(" pos activation - drop \n"); ...
0
votes
1answer
114 views

what attacks are possible on outdated versions of TAILS?

I know using outdated software is a bad idea, but until recently I have only been able to boot TAILS from LiveCDs that come with some Linux magazines. Since these arrive in my country late, I end up ...