Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

1
vote
1answer
21 views

Updating computers over unsafe connections

If an attacker manages to get control of one of the devices managing or routing internet traffic along or on my network, e.g, a compromised router or femtocell/IMSI-catcher for mobile internet, how do ...
0
votes
0answers
17 views

How to configure web server for tls 1.3 0-RTT attack?

I want to make a project that use 0-RTT attack to tls 1.3 web server. I want to configure a simple web site that use tls 1.3 . What do I need for that? What libraries to use and what js such as node....
0
votes
1answer
39 views

Bettercap 2.x SSLStrip Is Not Converting Links

I posted this before. I am creating a new post because of all the changes I would need to [edit] out. I have the latest version of bettercap. I have the latest version of Kali Linux using the latest ...
1
vote
1answer
45 views

Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)

I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
0
votes
0answers
33 views

Scapy as a proxy. How to send fake http GET response [on hold]

I've created program in python that listens for GET requests and drops them(blocks them from reaching router). Then I want to send fake http response with html code. How can I do that? I tried ...
1
vote
1answer
42 views

Certificates for localhost, MITM Attack

Excerpt from https://letsencrypt.org/docs/certificates-for-localhost/ You might be tempted to work around these limitations by setting up a domain name in the global DNS that happens to resolve to ...
2
votes
2answers
59 views

How to protect API endpoint from abuse in mobile App?

Let's assume I have a mobile app that fetches the news feed from an url on my server. GET/ https://example.com/api/v1/newsfeed Is there a way to restrict the access to this endpoint to only from ...
0
votes
1answer
70 views

Which type of authentication is not prone to man-in-the-middle attacks?

I am preparing for the CISA exam and come across material saying "challenge response-based authentication is prone to session hijacking or man-in-the-middle attacks". But the material doesn't mention ...
0
votes
0answers
22 views

Can A VPN provider see my HTTPS traffic? [duplicate]

Can the VPN provider do a man in middle attack on their clients who are using the HTTPS protocol?
0
votes
0answers
31 views

Pinning SSL public key [on hold]

I need to implement SSL pinning for my iOS app. To do this I relied on an open source library called TrustKit (many of you definitely know). Now this library allows me to block public keys for a given ...
1
vote
1answer
68 views

How to prevent MITM DNS attack by router [duplicate]

My landlord is very much a busybody and he has extreme political views. I suspect he is using a Windows program that communicates with the Wifi router to record what websites all the tenants are ...
0
votes
0answers
53 views

Best Practice to implement Pinning SSL [on hold]

In my app I am implementing Asymmetric encryption, thus obtaining a private key and a public key. The two keys are used to encrypt and decrypt messages exchanged between two users in chat Now I ...
0
votes
1answer
143 views

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop). To do this is run Kali Linux in a ...
3
votes
3answers
350 views

Suspicious “100% guaranteed” web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
0
votes
1answer
410 views

How to eavesdrop and decrypt the HTTPs communication of an IoT device?

I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
1
vote
1answer
57 views

How to avoid man in the middle attacks when sending sensible info via email?

I'm setting up a website where users can buy cupons. I should send coupons codes to customers via email and these codes are enough to use the coupon. How can I avoid man in the middle attacks? Do you ...
0
votes
1answer
45 views

Socks5 proxy: Danger of MITM malicious injection wget/ httrack?

I occasionally use HTTrack or wget on Linux to clone and archive websites for offline viewing. I use proxychains and a random socks5 proxy I find in those proxy lists on the Internet. The websites I ...
0
votes
1answer
41 views

SSLSPLIT not working with WSS

Is there a way in sslsplit through which we can bypass WSS over 443. Slack and a lot other websites are not working correctly
0
votes
1answer
25 views

Is there any other way through which an attacker can obtain user data from HTTP response except MITM and CORS attack?

I am doing some research for my college project and I want to ask is there any other way through which an attacker can obtain data from HTTP response except MITM and CORS attack. For an example, If I ...
1
vote
0answers
47 views

How can a 802.11 client verify the authenticity of an AP it is trying to connect to?

With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
2
votes
1answer
59 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
1answer
62 views

Can my VPN provider see my browsing activities on SSL sites? [duplicate]

I gather they can probably see everything if they want to on non-SSL sites but how about on SSL sites, can they do it?
1
vote
0answers
115 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
1
vote
0answers
18 views

Google search results hijacked locally / displaying moot in all browsers [duplicate]

So, since yesterday I have quite obviously caught something that Windows Defender doesn't recognize. Symptoms: All Google services suffer from Ad injection (non-YouTube ad overlays that cannot be ...
2
votes
2answers
37 views

Secure authorization for subscription-based games or services

Let's suppose I'm developing a subscription-based desktop game: the player pays a fee in order to get access to certain levels of the game for a certain time. For example, the player pays $1 to get ...
0
votes
1answer
82 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...
0
votes
0answers
19 views

Is there workaround for a man in the middle proxy using Shell in a Box?

I noticed at my customer's organisation that there is a proxy breaking the https flow. Certificates do not belong to the https web site, but to the organisation itself. They are using it for scanning ...
-1
votes
1answer
99 views

Surveillance by mobile network provider

I am customer of Vodafone Germany as my mobile network provider. After extension of my RED S mobile contract i realized, that the option "Vodafone Secure Net" is enforced by the company without ...
2
votes
1answer
151 views

What are the benefits to HTTPS between two servers I control?

The current setup we have is two servers that are held internally in my building. One of these is only accessible internally, the other is public facing. The internal server communicates with the ...
-1
votes
1answer
60 views

Deducing private key in RSA encryption from public key, cyphertext and plain text

Assuming someone is doing MITM attack. He knows the cyphertext, the public key and the plaintext message, can he deduce the private key from these 3 elements?
0
votes
0answers
50 views

DNS/CA/MITM Attack proof web hosting by relying on a public blockchain

I'm working on an interesting project, related to blockchain, smart contract and security in internet communications / web content serving. The main goal is to reduce risks of HTTP man in the middle ...
1
vote
2answers
95 views

Hide ports being knocked during Port Knocking

A while ago I wrote an article about implementing Port Knocking using iptables. Later in the post, I also talked about making this mechanism more secure. The way it works is that in order to open a ...
1
vote
0answers
33 views

How to prevent “man in the middle” attack over complete reseting a secure usb stick?

I have an Aegis Secure Key from my org, I only create the 'User PIN', and do not own the 'Admin PIN' and this device is set to 'READY ONLY' mode by the administrator. I need read many confidential ...
2
votes
1answer
72 views

After performing a SSL strip, can you upgrade back to HTTPS with your own encryption from the proxy?

Let's say you are performing a SSL strip. From what I can understand, it modifies either the client or server packets (in the http/https protocol), which indicate that it supports encryption to not ...
0
votes
1answer
147 views

Android & Man In the Middle — how did Fox News do it?

A couple years ago Fox News aired a short clip on how smartphones track and upload user location/physical state data. The clip is freely available on youtube and it shows how two Android smartphones ...
1
vote
4answers
160 views

Can a rogue wifi network install a CA certificate? [duplicate]

Could an attacker create a false wifi network, then force (either via the user exploitation or other means) CA certificate install to the browser, allowing them to use something such as Burp Suite to ...
6
votes
3answers
144 views

Is there any risk from attempting ssh authentication to a rogue server?

Suppose I'm about to connect to a new (unauthenticated to me) server. I've previously provided my ssh public key to the server owner (who populates it in the appropriate authorized_keys file). The ...
1
vote
1answer
78 views

Websocket VPN and MitM Gateways

A number of solutions [1] are available for tunnelling IP over Websockets to masquerade a VPN as browser traffic. How well are these connections isolated though? Specifically, if the browser happens ...
3
votes
1answer
109 views

What could MitM'ed U2F do?

Google has now released their "Titan" keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth: ...
-1
votes
5answers
296 views

Is encrypting data once enough? [closed]

If I encrypt my data and want to send it from point A to point B, is the end to end encryption is necessary? Although it's dependent on a) the encryption method and b) my security policy but is one ...
1
vote
2answers
65 views

How to authenticate using RSA avoiding MITM attacks

During my lessons of information security the professor told as that Alice can authenticate to Bob in the following way using RSA: Bob generates and sends a Nonce to Alice Alice signs this Nonce with ...
2
votes
1answer
140 views

Certs stop hackers from pretending to be a server. What stops them from pretending to be you?

Reading this answer on stackoverflow, I understand that certificates help identify that a public key and encrypted data are indeed sent by the one we're talking to. However, the data I send back to ...
1
vote
1answer
62 views

ettercap filters - drop the packet and inject packet

if (ip.proto == TCP) { if (tcp.src == 2404 || tcp.dst == 2404) { if (DATA.data+6 == 0x64 && DATA.data+8 == 0x07) { msg(" pos activation - drop \n"); ...
0
votes
1answer
109 views

what attacks are possible on outdated versions of TAILS?

I know using outdated software is a bad idea, but until recently I have only been able to boot TAILS from LiveCDs that come with some Linux magazines. Since these arrive in my country late, I end up ...
0
votes
0answers
30 views

Can an email man-in-the-middle attack from your own host be prevented? [duplicate]

This week some of the emails from my server started being dropped with the message "550 Action not taken (in reply to end of DATA command)". It seems to be caused by spam software on my dedicated ...
2
votes
2answers
178 views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
1
vote
1answer
115 views

Am I getting MITM'd?

Recently I've noticed a delay in my Internet speed. Pages seem to start loading a little later than they used to. I decided to do a speed test on speedtest.net, but it wouldn't do the speed test ...
2
votes
4answers
274 views

How do mobile apps prevent HTTPS MITM attacks when the user installs the attacker's CA certificate?

I am using a mobile app that installs a fake trusted CA certificate and therefore can capture the HTTPS traffic of other apps. Most of the time, this MITM attack is successful. However, I noticed ...
3
votes
1answer
79 views

Certificate based authentication

Can certificate-based authentication systems be bypassed in a MITM attack over WiFi ? I was just looking at a service called REMME and was wondering how secure it actually is.
1
vote
0answers
60 views

Hide data from wireshark on localhost

Assuming you're working with an old network protocol, or insecure/unencrypted protocol (HTTP for example), is there a way to make it difficult for network sniffers from capturing the packets? An MITM ...