A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to the attacker.

learn more… | top users | synonyms (1)

0
votes
1answer
10 views

Can duct tape prevent hackers from watching me?

Since hackers can hack into my mobile phone/computer and use its camera to watch over me, Q1: Can i know if my mobile phone/computer camera has been hacked? Q2: If i got hacked, does putting duct ...
-1
votes
0answers
27 views

How to hack a unmanaged switched network [on hold]

Given the following scenario You have an unattended unmanaged switch (Netgear FS608) A system with Kali Linux with a USB to LAN adapter (ASIX Electronics Corporation AX88772B) Wireshark capture of ...
2
votes
1answer
41 views

What might be the reason for an major antivirus software to not detect an malicious DNS entry?

I recently installed the trial version of Kaspersky as I had always a good impression of the features of their software. I also bought a 1 PC 1 year license, but didn't unsealed it yet as something ...
1
vote
1answer
52 views

How to capture all traffic from a new device?

I have a new IoT type of device that requires a wifi connection to work. I have no use for the device but I'd like to poke around it and learn more about it. How should I go about intercepting every ...
0
votes
0answers
23 views

Weird connection error prompts, Rootkits & MitM?

Can someone give me insight on these connection error prompts? https://imgur.com/a/FEHJj My internet kept reconnecting two weeks ago and I couldn't access the internet until I performed a hard reset ...
5
votes
1answer
67 views

Accepting Avast Antivirus MITM certificate “securely”

I have a multiplatform client plugin that has its own trust store (ie this client app does not trust the OS trust store) that is used to talk to a webservice over TLS. Clients that have Avast ...
-1
votes
1answer
21 views

How to securely pass data for backend update from client?

Suppose I have 3 videos on my page. Client can watch each of the videos, once complete, he would earn npoints depending on which video he has watched. I want to POST that n for the specific client to ...
2
votes
2answers
60 views

Why are there duplicated entries in the ARP table in a MitM attack?

All I read when it comes of detecting a man in the middle attack is that the ARP cache table will have duplicated entries for the attacker MAC address, but I can't find the reason why. The way I ...
1
vote
1answer
34 views

Is it possible to DNS-spoof Exchange ActiveSync?

My company's SSL Certificate for basically all their websites and Activesync servers have expired long ago. For my upcoming meeting's sake I need to explain how this is very insecure. Unfortunately I ...
2
votes
1answer
191 views

Snapchat tracking over company WiFi. What can they see, save or open?

I sent a snapchat to a coworker during company time. I was not on the work wifi, but now I believe they may have been. What will my employer be able to see from the snapchat that was sent and opened ...
6
votes
3answers
2k views

Isn't HTTPS insecure over a hacked router? [duplicate]

I have heard that a hacker can become a proxy using the router your device is connected to and send his own public key to you instead of you getting the server's public key - which the browser will ...
2
votes
2answers
62 views

DROWN vulnerability on root domain affect subdomains?

I maintain a departmental server hosted on a subdomain of my organizational network, as in department.example.com. Both example.com and department.example.com use HTTPS, but run on completely ...
0
votes
0answers
43 views

Would a hard-coded public key or fingerprint protect against MITM?

Say there's a server and a client. Normally to connect and establish an end-to-end encrypted session, they'd have to carry out key exchange, which potentially gives an attacker the opportunity to ...
0
votes
1answer
33 views

Does ARP or DNS spoofing play a role when performing MITM in fake AP attacks?

I have a test environment, where I try some wireless hacking tools and approaches, and lately I have been interested in evil twin attacks. I created a fake AP using airbase-ng, and specified the IP ...
1
vote
1answer
32 views

Man in the middle with certificate signed by known CA and DNS spoofing can work?

Assuming that I have a certificate for my local webserver signed by a well known CA like Verisign (so it will be trusted by browsers), and I'm able to DNS poisoning in Man-in-the-Middle to redirect a ...
0
votes
1answer
26 views

How is using an endpoint for public keys secure?

OpenID Connect has discovery endpoints containing a JKWS endpoint to get public keys to validate Identity and Access tokens. So for example: I have a desktop application which gets an Identity ...
4
votes
1answer
122 views

Man in the middle attack to a website which uses public key pinning

As far as I know, an attacker can intercept an encrypted traffic by adding custom certificate and CA authority into a victim's browser. I wonder if it works if a website uses public key pinning? I ...
19
votes
4answers
5k views

What stops someone from just redirecting a HTTPS connection to a HTTP version of the site?

Let's say someone does an ARP spoofing or DNS poisoning attack to redirect traffic to their own web server. If the real site has an SSL/TLS certificate, would that stop the hacker from redirecting let'...
1
vote
1answer
60 views

How do websites prevent certificate forgery?

I have recently developed interest about Wireless hacking, and I have seen in many instances in videos and stuff that people are (or more correctly, were) able to perform some kind of MitM attack ...
0
votes
1answer
168 views

Is this company's claim to have solved MITM attacks true?

The Daily Mail reported in Dec 2014 about a company that claimed to have solved the MITM attack. Can someone explain how this is possible or what the difference is from TLS?
6
votes
0answers
93 views

SSL Certificate MITM Attack for Expired Domains

Let's say I have a domain name, like mysupercoolproduct.com. I buy a 2 year SSL certificate for it, and then I am negligent and the domain gets snatched up by someone else. I still have a valid SSL ...
6
votes
2answers
1k views

How does HSTS stop MitM attacks?

I know that until a few years ago, someone could set up a fake wireless AP, and use something like SSLStrip to lure the victims into connecting to insecure versions of the major websites, such as ...
1
vote
1answer
294 views

How to make sure that the public key has not been tampered with during transit?

I understand how public key infrastructure works. There is a private and public key, and someone may use the public key to encrypt data that can only be decrypted with the private key. However ...
1
vote
2answers
126 views

Replacing images on HTTPS sites with MITMf?

I'm using MITMf for replacing images over HTTP, and everything works fine. But how can I replace images on sites like Google or Facebook that uses HTTPS? My actual command: sudo python mitmf.py -i ...
1
vote
1answer
964 views

Privacy error in google chrome

Recently I installed some random softwares on my windows 8.1 PC from the internet and along with that some malware also got installed. I started getting " Your connection is not private " error in ...
0
votes
0answers
55 views

Can someone who owns the wire read my SSL? [duplicate]

This question is regarding internet telecoms when the companies themselves are not to be trusted / cooperating with censorship-oriented governments, etc. Question: Assuming that a telecom owns the ...
0
votes
0answers
115 views

Secure Handshake and register for Auth

The registration The Start - pre-authentication Let's assume there are Alice and Bob. They know each others public keys and each of them generates a random string - Bob's Bobkey and Alice's Alicekey....
2
votes
1answer
41 views

Can the server detect when a client has disabled certificate pinning?

Many mobile applications enforce certificate pinning in order to make a man-in-the-middle attack difficult to accomplish. However, with a jailbroken/rooted device, it's possible to disable the ...
3
votes
1answer
74 views

Replay attack example for validating nonce?

I am trying to validate a JWT token received from Windows Azure. I am following the documentation here: https://azure.microsoft.com/en-us/documentation/articles/active-directory-v2-tokens/#validating-...
0
votes
1answer
43 views

Forwarding traffic to SSLSplit from Android

I want to forward non HTTP traffic to SSLSplit in order to do a MITM attack. How would I forward the traffic to SSLSplit from my Android?
1
vote
1answer
63 views

How can a server prove authenticity

I am working on a secure messaging platform and am having trouble figuring out how to protect against MITM attacks. My current setup can be summed up as follows: The server keeps a private key and ...
5
votes
2answers
114 views

What are the risks of sending sensitive documents that are on physical media and password protected via postal carrier using registered mail?

Background The company I work for is extremely risk averse when it comes to adopting the use of cloud services for improving business flows. We currently use a very famous search company's business ...
3
votes
5answers
221 views

If I accept a certificate in order to use my company’s Wi-Fi, am I vulnerable to MITM attacks?

In order to get my personal phone onto the Wi-Fi network at my workplace, I have to accept a certificate: If I accept this certificate, will I be vulnerable to man-in-the-middle attacks? For ...
2
votes
2answers
90 views

What information can my ISP see using squid proxy?

My ISP provides a transparent proxy to use and I can see that they are using the squid proxy for caching this. What I am wondering is what data can they see and what can they see further if they can ...
3
votes
1answer
128 views

Monitoring an uninvited guest on my WLAN? [duplicate]

At home I configured a common, residential, consumer-grade wireless network. It is build from a Broadcom router connecting a few personal devices (i.e. my laptop & smartphone) to the Internet. My ...
6
votes
1answer
72 views

How safe is a standard wireless keyboard from a MITM attack?

And are there any mitigations except using a wired keyboard?
0
votes
1answer
53 views

Is there a point to Dnscrypt when using VPN?

If a computer is already connected to the internet through VPN, is there point in encrypting DNS queries? From DNScrypt: DNSCrypt is a protocol that authenticates communications between a DNS ...
1
vote
1answer
23 views

How could you detect and defend against this type of (local) man-in-the-middle attack?

Consider this type of non-standard man-in-the-middle attack, which is fundamentally the same nature of attack without the poisoning phase being required: Someone cuts the internet line at your ...
1
vote
1answer
83 views

Is or was it possible to register a wildcard certificate to third level subdomain?

The use of a null byte in a certificate cn is very well known… and I saw this code in a popular smtp server (who obviously thought it didn’t worth to use the gnutls or openssl for doing that kind of ...
0
votes
2answers
683 views

Sniffing WhatsApp chat using Wireshark

Suppose two persons are using WhatsApp on Android. How can I see the communication between them if I have Wireshark running on a PC listening on network interface card? I know the communication ...
11
votes
2answers
191 views

Detect Man In The Middle From An Application [closed]

I did an interesting experiment today. I opened Amazon.com in my browser, logged in, brought up Fiddler, and tried to add a brand new credit card. I typed in my credit card number, expiration, and ...
3
votes
2answers
65 views

Signing Double Submit Cookies, where the value is a pseudo random string and a signature of it. Is this more secure?

I'm not sure if I am describing something that has already been proposed. If not, I would like to coin this "Signed Double Submit Cookies" as a method to improve the Double Submit Cookies technique ...
0
votes
1answer
28 views

Is HTTPS (and other asymmetric security protocols) still secure when using a VPN?

When I am on "public networks" that I don't trust much (for instance in my school) I use a VPN to ensure my privacy. From what I understand, any non-HTTPS connection could be read by the VPN company, ...
1
vote
1answer
163 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
0
votes
1answer
63 views

OS fingerprinting via TCP

I have searched online about this topic and the only information I got is that TCP SYN/ACK can be used to know the type of the target OS. If that is true, I don't understand how this occurs? Does TCP ...
1
vote
2answers
26 views

Mandadory checks a client should make to verify a ssl/tls certificate [duplicate]

Let's say I have a client, not a browser, that wants to connect with https to a server. It could be a python program, an android app or a library etc. Suppose the client has a list of trusted CAs and ...
32
votes
4answers
5k views

Can or should whitelisting replace encryption?

I've noticed that there is a third-party webservice we utilize programmatically at my job to transmit somewhat sensitive information and I was surprised to see that the endpoint was only using http, ...
3
votes
1answer
48 views

Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?

Is there a way for a domain good.com to promise that it will sign all of its DNS records, and that any unsigned records for any host *.good.com should be rejected? In other words, is there a way for ...
1
vote
1answer
91 views

Arp spoofing blocks internet [duplicate]

I work on a fresh Kali install running in a VM. I have an external Wi-Fi NIC used only by the VM (I try to not use the internet connection of the host). The network is protected (hum) by WEP, with ...