Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [man-in-the-middle]

A man-in-the-middle attack (MiTM) is an attack against a communication protocol where the attacker relays and modifies messages in transit. The parties believe they are talking to each other directly, but in fact both are talking to each other via the attacker in the middle.

1
vote
0answers
45 views

Key reinstallation attack how does it work without a pre-shared key?

The author of the key reinstallation attack released scripts on Github to test AP and clients. To test the clients, you have to connect to a fake AP but you still need to know the pre-shared key. Of ...
2
votes
1answer
52 views

What is MITM attack in terms of implementation?

When I search for MITM in the google most of the results say an unauthorized person positions himself in a conversation between two authentic users for malicious reasons, and there are several types ...
-1
votes
2answers
117 views

How does this spyware intercept my https traffic? [duplicate]

The firm I'm working for has installed a "spying" software on my computer which intercepts my https traffic. No hard to understand how it works, it's something like mitmproxy, which signs on the fly ...
0
votes
0answers
92 views

What are the dangers of using 3g/4g in smartphones?

Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords? If exists, how I can protect myself from this type of attack? My device ...
0
votes
0answers
27 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...
0
votes
0answers
42 views

SSLStrip demonstration with bettercap 2.x

I'm trying to get bettercap 2.x working for an sslstrip proof of concept demonstration. I'm running it against a site that I know doesn't properly implement HSTS, found from several blogs. The site ...
0
votes
1answer
58 views

Aren't VPN servers exposed to the same threats as public Wi-Fi?

Besides trust of the VPN provider, are VPN servers safe? Other people connect to it and it can be compromised, right? Is it the same threat as being connected to a public Wi-Fi where someone could ...
3
votes
2answers
92 views

How to MiTM HTTP/2 Traffic

I recently had to MiTM an HTTP/2 connection over TLS and realized there is no MiTM tool out there that fully supports HTTP/2 over TLS, and no articles/blog posts written about this topic. After ...
0
votes
1answer
39 views

mitmf doesn't work when disabled ip forward

I have virtual machine windows connected to NAT network. I also have kali linux virtual machine connected to same NAT network. I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward gives ...
3
votes
0answers
28 views

Risks of not enabling HSTS on a static content subdomain. Even though main domain does have hsts

I'm investigating an issue where our static content (js, css) is deployed in AWS Cloudfront under a subdomain of our main website and doesn't have HSTS enabled. The main domain does have HSTS enabled ...
2
votes
2answers
224 views

Wi-Fi Pineapple Device - is it that easy to steal people's info?

I've been doing research on the internet relating to cybersecurity and I came across an article talking about a "Wi-Fi Pineapple". The article made it seem like anyone can buy this and basically ...
1
vote
1answer
61 views

What are the ways to identify a DNS cache poisoning attack?

Consider a scenario: (at victims end) in DNS cache poisoning attack. When the victim will go to a website (eg: gmail.com), he will be taken to some other phishy website. Now here the URL remains the ...
0
votes
0answers
27 views

IPSec Sniff Traffic

I'm wondering if it is possible to Sniff IPSec connections. At the beginning of a connection, the two peers agree on a SA and exchange a PSK or Certificates. What I'm thinking about, is to ...
0
votes
1answer
85 views

Why does Cain and Abel downgrade SSH version 2 to v 1.51?

I am developing a lab exercise with Cain and Abel and want to know why it is necessary to downgrade SSH before attacking. Identification phase The server sends to the client an identification ...
0
votes
0answers
38 views

How to check if installed Trusted CAs are not dangerous? [duplicate]

I've checked my Windows 7 installed Trusted Certificate Authorities using MMC tool as below: Questions are: How can I be sure that they are genuine and are installed by Microsoft and not by a third-...
7
votes
2answers
950 views

Why is Huawei's potential spying activity a big issue given that communication protocols are supposed to be secure from MITM attacks? [duplicate]

As far as I understand, Huawei is currently accused of supplying hardware to Western countries that could be used for spying by the Chinese government. But why would this be a big deal? Properly ...
0
votes
1answer
76 views

How can I see the data content (HTML, JS, etc) in HTTPS responses in Wireshark?

I'm learning packet sniffing and analysis with Wireshark. At first, I could only see DNS, TCP, and ARP packets. I learned I couldn't see any HTTP packets because it was all encrypted in the transport ...
0
votes
1answer
116 views

How to do Mobile application testing using Burp Suite on latest ios and android devices

I am trying to intercept the request with burp suite for mobile application pen testing on iOS and Android devices. Here are the settings below which I have done in below points. I made sure that my ...
0
votes
2answers
100 views

What are MITM proxies used for in enterprises?

My company (like many others I assume), uses a "man in the middle" proxy with a personal root CA. Disclaimer : I'm not a security expert so perhaps I do not correctly understand what this network ...
1
vote
1answer
76 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
0
votes
2answers
104 views

How to check Google SSL certificate?

I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine. I wonder, how do I know the certificate I have is legit? That is, ...
1
vote
0answers
69 views

ARP spoofing doesn't work as expected?

I have seen products like CUJO (https://www.getcujo.com) and Firewalla (https://firewalla.com/) doing ARP spoofing for network filtering and device blocking. As far as know, simplest way to ...
2
votes
1answer
86 views

Publishing a private key used for HTTPS certificates, is it ever OK?

I want to make it easy for users who have private servers to connect to those servers inside their LAN from Android devices. I want to avoid having these users perform configuration tasks like, ...
0
votes
0answers
146 views

Emulate a phone number to receive SMS?

I would like to perform some registrations on a website sending SMS code to verify identity on each registration process. Free SMS sites are flagged. Is there any way to choose a random phone number ...
58
votes
4answers
9k views

Is there a way to make sure my government does not swap out SSL certificates?

I was recently wondering whether there exists a way to make sure my government is not swapping out SSL certificates in order to intercept the traffic. I know almost all browsers are complaining in ...
0
votes
0answers
35 views

Distributed network with one host behind dmz and the other without

Context: This a question from my homework assignment. There is a company with two sites A and B. B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall Network A ...
1
vote
0answers
47 views

Is secured WiFi with a publicly available password any safer than open WiFi? [duplicate]

Modern security training take the same principle that sex Ed videos took when I was in school -- scare the viewers into never taking a chance. Our corporate training suggests to never connect to any ...
0
votes
0answers
73 views

DNS spoofing using MITMF

Is there a way to redirect all requests to a single website? I'm using MITMF to do the DNS spoofing and here is what I have: [[[A]]] # Queries for IPv4 address records *.(website request)=(ip to ...
0
votes
0answers
96 views

Man in the middle-attack

I'm trying to do a MITM-attack on my Ubuntu platform. After some searching arounf at the internet I'm doing everything correct as follow: sudo arpspoof -i wlan0 -t Victim-IP Router-IP sudo arpspoof -...
1
vote
1answer
48 views

Updating computers over unsafe connections

If an attacker manages to get control of one of the devices managing or routing internet traffic along or on my network, e.g, a compromised router or femtocell/IMSI-catcher for mobile internet, how do ...
2
votes
1answer
316 views

Bettercap 2.x SSLStrip Is Not Converting Links

I posted this before. I am creating a new post because of all the changes I would need to [edit] out. I have the latest version of bettercap. I have the latest version of Kali Linux using the latest ...
1
vote
3answers
748 views

Bettercap 2.x SSLStrip Is Not Breaking TLS (Without HSTS)

I have the latest version of bettercap. I have the latest version of Kali linux using the latest version of VirtualBox on the latest version of Windows 10. My target machine is the lowest possible ...
2
votes
1answer
108 views

Certificates for localhost, MITM Attack

Excerpt from https://letsencrypt.org/docs/certificates-for-localhost/ You might be tempted to work around these limitations by setting up a domain name in the global DNS that happens to resolve to ...
2
votes
2answers
93 views

How to protect API endpoint from abuse in mobile App?

Let's assume I have a mobile app that fetches the news feed from an url on my server. GET/ https://example.com/api/v1/newsfeed Is there a way to restrict the access to this endpoint to only from ...
0
votes
1answer
77 views

Which type of authentication is not prone to man-in-the-middle attacks?

I am preparing for the CISA exam and come across material saying "challenge response-based authentication is prone to session hijacking or man-in-the-middle attacks". But the material doesn't mention ...
1
vote
1answer
127 views

How to prevent MITM DNS attack by router [duplicate]

My landlord is very much a busybody and he has extreme political views. I suspect he is using a Windows program that communicates with the Wifi router to record what websites all the tenants are ...
0
votes
1answer
744 views

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop). To do this is run Kali Linux in a ...
3
votes
3answers
364 views

Suspicious “100% guaranteed” web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
0
votes
2answers
802 views

How to eavesdrop and decrypt the HTTPs communication of an IoT device?

I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
1
vote
1answer
79 views

How to avoid man in the middle attacks when sending sensible info via email?

I'm setting up a website where users can buy cupons. I should send coupons codes to customers via email and these codes are enough to use the coupon. How can I avoid man in the middle attacks? Do you ...
0
votes
1answer
109 views

Socks5 proxy: Danger of MITM malicious injection wget/ httrack?

I occasionally use HTTrack or wget on Linux to clone and archive websites for offline viewing. I use proxychains and a random socks5 proxy I find in those proxy lists on the Internet. The websites I ...
1
vote
1answer
63 views

SSLSPLIT not working with WSS

Is there a way in SSLsplit through which we can bypass WSS over 443? Slack and a lot of other websites are not working correctly.
0
votes
1answer
26 views

Is there any other way through which an attacker can obtain user data from HTTP response except MITM and CORS attack?

I am doing some research for my college project and I want to ask is there any other way through which an attacker can obtain data from HTTP response except MITM and CORS attack. For an example, If I ...
2
votes
0answers
74 views

How can a 802.11 client verify the authenticity of an AP it is trying to connect to?

With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
2
votes
1answer
66 views

How big is the man in the middle threat from outside the network when communicating on an intranet?

I know that certificates and signatures are really important for preventing Man-in-the-middle attacks, among other things. I am not concerned about a third party reading the transmission, only ...
2
votes
1answer
67 views

Can my VPN provider see my browsing activities on SSL sites? [duplicate]

I gather they can probably see everything if they want to on non-SSL sites but how about on SSL sites, can they do it?
2
votes
0answers
177 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
1
vote
0answers
18 views

Google search results hijacked locally / displaying moot in all browsers [duplicate]

So, since yesterday I have quite obviously caught something that Windows Defender doesn't recognize. Symptoms: All Google services suffer from Ad injection (non-YouTube ad overlays that cannot be ...
2
votes
2answers
41 views

Secure authorization for subscription-based games or services

Let's suppose I'm developing a subscription-based desktop game: the player pays a fee in order to get access to certain levels of the game for a certain time. For example, the player pays $1 to get ...
0
votes
1answer
138 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...