Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

Filter by
Sorted by
Tagged with
1
vote
0answers
30 views

Canadian police mentioned a new line-trapping MITM technique, but what is that?

It looks like the police saying that there is a new technique used to scam the lady, but they do not get into much technical detail. I'm curious how it was possible to listen to what she was saying ...
0
votes
0answers
40 views

Are there LTE attacks besides aLTEr?

Background: I understand that most attacks on cell network-subscribed individuals rely on exploiting the poor authentication of GSM/2G comms. And if the victim is on LTE, then the next best strategy ...
0
votes
0answers
50 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
8
votes
3answers
309 views
+50

Can network traffic between Docker containers be sniffed?

On normal networks, it is a security risk to send plaintext data, since attackers can sniff or even manipulate all traffic. Encryption is required for secure communication. When using Docker ...
2
votes
0answers
27 views

Capture macOS/IOS system HTTPS packets

I tried to analyze the https traffic of apps on my MacBook and iPhone with Charles with SSL proxy (I use HTTP proxy for IOS and installed and trusted Charles certificate). I managed to decrypt most ...
0
votes
1answer
38 views

Verifying installers downloaded over HTTPS

Many developers distribute software over a HTTPS connection and recommend that their users verify the integrity of the executable by comparing a hash or PGP signature. Both the executable and the hash ...
1
vote
1answer
108 views

What Data Does an ISP Store? [closed]

Sorry for being so general, but I know my ISP logs connections to others and all. I'm just questioning whether they keep any physical data that was over a HTTPS connection. Learned about how ISPs also ...
2
votes
1answer
99 views

If I accept a root Cert what am I opening myself up to?

If I connect to a WIFI AP and it wants to install a root cert. They read my HTTPS traffic, Right? Does using OpenSSH on my cell phone to my home router help protect me? Or can this traffic be ...
0
votes
0answers
41 views

Western Digital My Cloud - Website GUI & Security

I am trying to figure out if using the Website "files.mycloud.com" is exposing my files to being intercepted at a central point. I see that there is an HTTPS connection with valid cert for *.mycloud....
0
votes
1answer
78 views

MITM setup using airmon-ng, iptables, and isc-dhcp server

I want to set up a MITM-scenario as an exercise for myself. My setup looks like this: Internet <--------> Laptop <----------> Client At this stage I just want to route the traffic from my AP ...
0
votes
2answers
122 views

Is MITM possible for Google services (TLS/SSL) as of today?

I personally trust Google in terms of security but I'm not sure whether man-in-the-middle (MITM) attacks against Google services AS OF TODAY possible or not. As far as I know, Google uses some ...
1
vote
1answer
67 views

Using mitmproxy to analyze mobile application and iOS network data

I followed a guide where the author connected Windows PC and iPhone to his home WiFi network. He installed mitmproxy and ran mitmweb.exe on PC. On iPhone he went to wifi settings and set a manual ...
1
vote
1answer
95 views

Man-in-the-middle attack (ACME / Let's Encrypt) on Authorization Key?

By looking at https://letsencrypt.org/how-it-works/, I got the feeling that a man-in-the-middle attack might be possible in the 'Domain Validation' phase. During that phase, the admin is asked to e....
1
vote
1answer
119 views

detecting MITM attacker on WIFI

I have read this: Can I detect a MITM attack? My question is very simple, since a MITM attacker consumes double number of packets, is possible to identify him, isn't it?
2
votes
1answer
80 views

What are the security concerns about using unencrypted TCP keepalive with TLS?

In my software both the server and the client sends unencrypted TCP keepalive messages to be able to detect the broken pipe within a reasonable time. It also uses TLS 1.3 encryption with OpenSSL 1.1.1....
1
vote
0answers
72 views

Track HTTP(S) Network calls being made by an Android Device

I am planning to track the Network calls being made by apps and the website of an Android Device. I have used the Burp Suite tool for tracking the network calls. Until now the Android Device and the ...
1
vote
1answer
58 views

Protection against tampering

Recently, I have downloaded a game from Steam. I wondered whether it was somehow possible to alter the data of the game and replace it with malware without the computer it was sent to noticing. ...
0
votes
0answers
70 views

Phishing urls from shnpoc.net/McAfee?

I was looking into my websites traffic and found few entries from a subdomain for shnpoc.net domain. And when I looked into it, it was transparent proxying my website. On checking further, I found ...
3
votes
5answers
217 views

Is it possible to safely connect to the internet using a malicious router?

If you connect to the internet using a router that's controlled by a hacker, is there some way you can safely surf the internet without getting hacked? By using a vpn and firewall maybe? Does it make ...
1
vote
2answers
76 views

Monitoring the HTTP(S) calls being made from android App

I want to test for security vulnerabilities in an Android App and hence want to monitor all HTTP(S) calls being made from an Android App. I have setup BurpSuit in my Laptop and have also set up the ...
1
vote
0answers
42 views

Experiencing ssh host key mismatch with x2goclient

x2goclient (on Windows) shows a different ssh host key hash than the output of ssh-keygen -lf /etc/ssh/ssh_host_key_$cypher_ley.pub -E md5 on the host. Connecting with other ssh clients from the same ...
0
votes
0answers
36 views

How to do a SSL MITM for all programs trying to access the internet on my local Ubuntu

How to do an SSL MITM for all programs trying to access the internet on my local Ubuntu. When a program on my local machine tries to access the internet using https I would like to intercept and ...
1
vote
0answers
31 views

Geofence Process against Legitimate MitM

We are developing a solution where a door is controlled by a backend that is publicly available over the 4G network (there is no local network available at the place of deployment). The user is ...
1
vote
1answer
90 views

Is using a VPN like changing your ISP?

I am asking this question from a security perspective (not privacy) I have read that using a vpn can prevent hackers including your isp (who could be working for the government) from doing mitm ...
1
vote
3answers
121 views

MITM: Is and How is it possible to manipulate HTTP POST data sent by the host to the server

Is it and how is it possible to modify a HTTP POST parameter that is being sent by the host to a server assuming that you are in a man-in-the-middle position in a network? HOST(POST=foobar) --------> ...
42
votes
7answers
9k views

Why is the HTTP protocol more susceptible to being intercepted than the BitTorrent protocol?

I'm downloading an .iso file that is offered through the main website, which recommends users to use BitTorrent. In addition, they offer the download via HTTP using different mirror sites that belong ...
7
votes
2answers
222 views

Does cloudflare protect against BREACH attacks?

I know that enabling http compression would make a server vulnerable to the BREACH attacks. So we have disabled compression from the server side, tested and it was all good. Then we implemented ...
0
votes
1answer
57 views

Why is subject verification an effective means to detect MitM attacks in TLS? [duplicate]

Say, an attacker fakes an original server certificate by a trusted CA using a another certificate from the same CA in a Man-in-the-middle attack. Why can this be detected using subject verification on ...
1
vote
1answer
53 views

MitM to intercept SSL/TLS based on network traffic alone?

Say, an attacker wants to perform a MitM but all he has available is the network traffic between a client and a server. He has no further information about the data or certificates than what's being ...
0
votes
1answer
31 views

Need for additional verification in mutual TLS authentication with own CA

Say, the goal is to facilitate secure communication between two parties. The definition of secure is that both parties can be sure that they are actually talking to a trusted party, not somebody else ...
1
vote
2answers
84 views

Mutual TLS and Cert Pinning solving the same problem?

To prevent MITM from my app I will use cert pinning. To prevent having not approved parties communicate to my server I can use Mutal TLS, which actually accepting communication from trusted sources. ...
0
votes
0answers
62 views

Is apt-get secure against DNS Spoofing? [duplicate]

I am aware that installing and updating packages through apt-get should be fairly secure because an attacker supposedly should not be able to interfere or inject packets into the downloads as well as ...
0
votes
2answers
49 views

Would verifying the integrity of my website by comparing digest on the client side work?

So today I read about the sub-resource integrity attribute feature for browsers. And I though of using the same concept to verify the integrity of my HTML to protect against tempering by my web host ...
1
vote
3answers
103 views

Can Burp be setup to intercept traffic from client application?

I have a client application installed on my Windows computer and I want to perform a MITM on this application to inspect the traffic. I understand that Burp can do the MITM for web application, but ...
0
votes
0answers
15 views

It it possible to have Ettercap spread its work across more than one thread?

Wondering if it's possible to have Ettercap split its processing work up across more than one thread, whether by a manual "jury-rigged" abstraction layer, or if there's a way/option to have it be ...
1
vote
2answers
82 views

What are the guarantees that TLS provides without using a certificate in the scenario?

Assume a scenario where we have a modular system including: an Authentication Module (AM) which gets username and password of an internet user and issues a token for the user. User<-->AM ...
3
votes
2answers
104 views

What prevents malicious servers from spoofing mail transfer agents and/or mail delivery agents?

An email system typically consists of multiple agents: Mail user agent (MUA) Mail submission agent (MSA) Mail tranfer agent (MTA) Mail delivery agent (MDA) Evidently the 'middlemen' of this system ...
4
votes
1answer
157 views

How secure is the phone dial?

A renown online bank uses a phone dial login system (input your login and password via the phone dial pad). How secure is this communication against MitM and similar attacks? Considering I recently ...
1
vote
1answer
65 views

How does TLS protect against a MITM cipher suite downgrade? [duplicate]

The initial TLS handshake agrees on a cipher suite to use, but what stops an attacker from MITM-ing the initial handshake and downgrading the cipher suites?
0
votes
2answers
76 views

Is your communication in same subnet safe when an attacker initiates a ARP Poisoning attack?

Is it possible that the Man-In-The-Middle can eavesdrop on communications in your subnet? (meaning between computers in your subnet and not outside of it) I am learning networking and I made this ...
0
votes
2answers
53 views

Oauth2 PKCE - What security does “S256” provide over “plain”?

The Oauth PKCE protocol flow is as follows, as defined in RFC 7636: +-------------------+ | Authz Server ...
3
votes
1answer
160 views

Why isn't cloud (AWS, Azure, GCP) metadata served over HTTPS?

Why can any application or user on your server type an insecure URL like these to get server information about that instance? http://instance-data.us-east-1.compute.internal/latest/meta-data/ http://...
0
votes
0answers
50 views

Victim of bettercap mitm web page times out

For school, I am trying to run a mitm attack using bettercap. I can sniff the traffic without problems, but the real problem is that the victim computer browser times out or says "it is impossible to ...
5
votes
1answer
223 views

Unable to downgrade https to http through sslstrip, arpspoof

I've been following this guide: https://www.cybrary.it/0p3n/using-sslstrip-in-kali-linux/ and others too, ex: official Sslstrip one: https://moxie.org/software/sslstrip/ without any success. I'm ...
-1
votes
1answer
100 views

Why does traceroute to my home router go outside of my local network?

Earlier today, I wanted to access the admin web server of my router. But for some reason, I was not able to access it, the web browser telling me there was no server on that address. I had internet ...
0
votes
0answers
32 views

Install Debian on a dedicated server remotely without sending any clear-text credentials

As stated in the title, are there any existing best practices to install Debian on a remote server, without sending clear text passwords over the link? For example - a lot of dedicated server ...
3
votes
1answer
119 views

How to know if a web page is valid and not a man in the middle fake page?

Recently, the facebook page changed on my computer (on others from the same router, I get the regular page). I checked the ssl certificate, and it seems to be authentic, however, as the page does not ...
1
vote
0answers
55 views

How to intercept data my TV communicator sends and receives?

I wish to check how and what is being sent when I interact with my TV via the remote that talks to the communicator box (not smart tv). I am curious what protocols are used, and how often does the ...
0
votes
1answer
80 views

Does TLS protect against a man-in-the-middle masquerading as the client?

A message authorization code is used in TLS to prevent man-in-the-middle-attacks that involve tampering with the contents of the packet in-flight. However, there is one specific attack which I don't ...
0
votes
2answers
262 views

Intercepting Android 9 app-traffic

I used MitMproxy until recently I switched from the Samsung Galaxy S5 to the S9+ which runs Android 9... and suddenly I can't intercept apptraffic anymore. Looks like the proxy in the wifi-settings is ...