All Questions

Tagged with
Filter by
Sorted by
Tagged with
5
votes
2answers
178 views

How does Tor protect against MITM attacks between the client and relay nodes?

According to robertheaton.com: When a Tor client constructs a circuit, it negotiates TLS sessions with each of the nodes it has chosen for its circuit using the nodes’ TLS certificates and public ...
18
votes
3answers
5k views

Can attackers change the public key of certificate during the SSL handshake

The communication is not encrypted during the SSL handshake. If an attacker conducts a man in the middle attack between server and client to capture the certificate, and change the public key in the ...
72
votes
1answer
15k views

How can Kazakhstan perform MITM attacks on all HTTPS traffic?

There is now MITM on HTTPS traffic in Kazakhstan. But for MITM to work, other than installing the certificate, there has to be someone proxying the request, right? Will that role be played by the ...
2
votes
2answers
177 views

Does changing DNS help prevent MITM on ISP level?

A few days ago Kazakhstan gov-t passed a law to enforce using gov-t signed SSL certificates on all https traffic on all (almost) ISPs. So when you visit https://google.com your browser will warn that ...
6
votes
2answers
218 views

State forces installation of SSL root CA, how to evade / mitigate?

Kazakhstan has forced all users in its territory to install a state-issued SSL root CA certificate "aimed at enhancing the protection of citizens, government bodies and private companies from hacker ...
20
votes
7answers
5k views

Is encryption still applied if you ignore the SSL certificate warning for self-signed certs?

Would encryption still be applied on communication with devices using self-signed certificates if you ignore the warning and proceed without installing the certificate? Would you need to install it to ...
0
votes
0answers
42 views

Can charles proxy (with root cert installed) intercept and read all traffic between mobile app and server? [duplicate]

I have a mobile app that queries various 3rd party API/sites (these are https links). I have a concern that SSL proxies (e.g. Charles) can be used to intercept the traffic - man in the middle. Are ...
0
votes
0answers
46 views

TLS connection - Detecting data breach / manipulation [duplicate]

I need some help in creating a secure connection using TLS. I have a downloadable software that connects to our server using TLS connection. We want to ensure that the data sent by client to the ...
0
votes
2answers
79 views

Changing the SSL certificate chain

When connecting to a resource with SSL, I know that the certificates can be validated by the client to make sure the connection is secure. I recently run into SSL problems at work, when connected to ...
1
vote
0answers
65 views

What are the risks involved in blindly trusting all certificates for https requests over unknown proxy servers? [closed]

My use case is a Java application where no sensitive data being transmitted whatsoever, and the response being accurate (i.e. unmodified) is unimportant.
1
vote
1answer
106 views

Use subject key identifier for certificate pinning

As said here, certificate (or public key) pinning refers to a certificate (or a public key) which is hardcoded in the app that we want to protect and then compared to the one provided by the server. ...
0
votes
1answer
63 views

Is it safe to use RPC with sensitive data through an encrypted VPN connection instead of SSL/TLS?

I have an application where there I'm planning the following setup: user <-----------------> layer 1 server <------------------> backend server internet (https) ...
0
votes
0answers
147 views

HTTPS MITM Proxy breaks HTTPS

I tried to reverse engineer an Android APP using MITMProxy, and the Server responds with an unauthenticated-error. If the whole authentication would be using headers (Basic, etc...), the Proxy should ...
-5
votes
1answer
299 views

Monitor SSL traffic at home

There is an underage guest in my house for whom I will be legally responsible for the next few months and I'm concerned about some of his interactions online from some of the public postings I've seen ...
1
vote
1answer
65 views

Is a company decrypting all SSL traffic through a Root CA GDPR compliant? [closed]

I am wondering if a company employing EU citizens is allowed to decrypt SSL traffic of those citizens in a MITM style attack without even informing them what data is collected (without even notifying ...
1
vote
2answers
297 views

Can't Cloudflare sniff sensitive login data from its users' websites?

So I recently started using the free Cloudflare plan for my website to provide any sort of protection. And I noticed that, given they do the whole "We'll accelerate your website by caching parts of ...
1
vote
2answers
58 views

Transactional replication through VPN, do I need to encrypt connection?

New to security. We are planning to setup SQL Server transaction replication over a VPN to Azure over the internet. The source server is inside our data center and the target will be a managed ...
1
vote
1answer
93 views

Are self signed certs safe to a developer use in local debug?

The same computer I use for work in home, is the same for personal uses (gamimg, social medias) and of course, internet banking. I'm back-end developer and recently, I started to work with fiddler to ...
-1
votes
2answers
146 views

How does this spyware intercept my https traffic? [duplicate]

The firm I'm working for has installed a "spying" software on my computer which intercepts my https traffic. No hard to understand how it works, it's something like mitmproxy, which signs on the fly ...
3
votes
2answers
292 views

How to MiTM HTTP/2 Traffic

I recently had to MiTM an HTTP/2 connection over TLS and realized there is no MiTM tool out there that fully supports HTTP/2 over TLS, and no articles/blog posts written about this topic. After ...
3
votes
0answers
43 views

Risks of not enabling HSTS on a static content subdomain. Even though main domain does have hsts

I'm investigating an issue where our static content (js, css) is deployed in AWS Cloudfront under a subdomain of our main website and doesn't have HSTS enabled. The main domain does have HSTS enabled ...
0
votes
0answers
69 views

How to check if installed Trusted CAs are not dangerous? [duplicate]

I've checked my Windows 7 installed Trusted Certificate Authorities using MMC tool as below: Questions are: How can I be sure that they are genuine and are installed by Microsoft and not by a third-...
0
votes
1answer
86 views

How can I see the data content (HTML, JS, etc) in HTTPS responses in Wireshark?

I'm learning packet sniffing and analysis with Wireshark. At first, I could only see DNS, TCP, and ARP packets. I learned I couldn't see any HTTP packets because it was all encrypted in the transport ...
0
votes
1answer
854 views

How to do Mobile application testing using Burp Suite on latest ios and android devices

I am trying to intercept the request with burp suite for mobile application pen testing on iOS and Android devices. Here are the settings below which I have done in below points. I made sure that my ...
60
votes
4answers
9k views

Is there a way to make sure my government does not swap out SSL certificates?

I was recently wondering whether there exists a way to make sure my government is not swapping out SSL certificates in order to intercept the traffic. I know almost all browsers are complaining in ...
2
votes
1answer
254 views

Certificates for localhost, MITM Attack

Excerpt from https://letsencrypt.org/docs/certificates-for-localhost/ You might be tempted to work around these limitations by setting up a domain name in the global DNS that happens to resolve to ...
3
votes
3answers
372 views

Suspicious “100% guaranteed” web hosting security package

Notes: I have very limited knowledge and experience in this field. My boss does not want to spend a penny more that what we already paid for. The website has a form that sends a message to our email ...
0
votes
2answers
945 views

How to eavesdrop and decrypt the HTTPs communication of an IoT device?

I am trying to setup a MitM scenario between an IoT device and WAN. It is possible and quite easy to achieve same thing for the application run on a mobile device by setting my proxy server(Fiddler)'s ...
1
vote
1answer
87 views

SSLSPLIT not working with WSS

Is there a way in SSLsplit through which we can bypass WSS over 443? Slack and a lot of other websites are not working correctly.
2
votes
0answers
91 views

How can a 802.11 client verify the authenticity of an AP it is trying to connect to?

With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
2
votes
1answer
77 views

Can my VPN provider see my browsing activities on SSL sites? [duplicate]

I gather they can probably see everything if they want to on non-SSL sites but how about on SSL sites, can they do it?
3
votes
0answers
302 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
3
votes
1answer
228 views

What are the benefits to HTTPS between two servers I control?

The current setup we have is two servers that are held internally in my building. One of these is only accessible internally, the other is public facing. The internal server communicates with the ...
2
votes
2answers
599 views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
2
votes
4answers
851 views

How do mobile apps prevent HTTPS MITM attacks when the user installs the attacker's CA certificate?

I am using a mobile app that installs a fake trusted CA certificate and therefore can capture the HTTPS traffic of other apps. Most of the time, this MITM attack is successful. However, I noticed ...
3
votes
2answers
361 views

How can I Instruct a browser to reject proxy MITM certificate for my website

Is there any way for my website to tell a browser, such as Chrome, to disallow a substitute MITM certificate like those used by corporate proxy servers? e.g. see Question 61056: Is there any way for ...
0
votes
2answers
219 views

Is there a threat in router backdoors if I only use SSL?

If there is a backdoor in a modem or router, it can execute a MITM attack. But what if I use SSL (actually TLS)? We use TLS in order to prevent MITM attacks anywhere on the way (such as the ISP, the ...
9
votes
2answers
1k views

What happened with Kazakhstan's Root CA MITM policy?

In 2015 there were news that Kazakhstan was going to start intercepting all HTTPS traffic via "man-in-the-middle attack" starting Jan 1, 2016, by requiring kazakhstanis to install their root CA. ...
0
votes
1answer
436 views

Cookies Stealing

Is it possible to steal cookies through MITM on 'HTTPS' site if the cookies are missing 'Secure' Flag? Is it possible to steal cookies through MITM on 'HTTP' site if the cookies have 'Secure' Flag?
0
votes
1answer
92 views

How SSL Handshake recognise any attack

I already know that a replay attack on an SSL handshake is ineffective, but if we suppose that an "intruder" has listened and has got all of the information from a previous handshake, how will the ...
0
votes
2answers
2k views

How MiTM attack got performed on self-signed certificate while private keys is generated by ourselves?

On MongoDB I have enabled SSL/TLS feature to encrypt data transmission between client and server. But what I have done is to generate a self-signed certificate using openssl in linux. The question is ...
0
votes
1answer
41 views

Can I serve a self signed SSL certificate for domain B from domain A, then MITM connections to domain B with it after it's been accepted?

I can generate a self signed certificate for any Common Name, such as www.google.com. If I have a server at example.com and serve up a certificate with the common name www.google.com and the user ...
0
votes
1answer
195 views

Possibility of Man in the Middle attack in SSL Protocol during initial Handshake [duplicate]

This is my understanding of Digital Certificate Signing mechanism so far. Correct me if I am wrong. www.abc.com(SSL enabled) is typed in the browser for the first time The server of abc.com sends it'...
5
votes
2answers
1k views

Why/how does Firefox bypass my employer's SSL decryption?

My employer has set up what they're calling "SSL decryption" for Internet access from within the company. I believe this is provided by an f5 device. They have installed a trusted root certificate on ...
0
votes
2answers
104 views

How to hide my website traffic from man in the middle?

I know that even with HTTPS it's possible to a company proxy to see traffic from/to my website (e.g. Intercepting HTTPS Traffic Using the Squid Proxy Service in pfSense). I want my users to have ...
1
vote
2answers
88 views

Cases of information stolen by eavesdropping due to non-use of TLS

Have there been any actual known examples of widespread (or not) information e.g. passwords or credit card details lost to an eavesdropper or MITM due to non-use of SSL/TLS?
0
votes
1answer
3k views

how to capture and decrypt packets sent over TLS [duplicate]

I have been using MITM for decrypting https traffic , using tools like fiddler and burpsuite . Is there a way to decrypt packet sent over TLS, any guidance would be a real help.
5
votes
1answer
213 views

How to prevent MITM session fixation attack over plain HTTP upon first request?

Websites has various methods implemented to tell browser to always use HTTPS - HSTS header, server redirec to HTTPS, CSP policy. However, the first time a user visits the site it can be over palin ...
2
votes
2answers
682 views

I get a javax.net.ssl.SSLHandshakeException but my colleague does not, what could this mean?

When trying to send an email over smtp with SSL in Java code I get the following exception: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find ...
2
votes
2answers
208 views

SSH key based login is not vulenerable to MiTM attack. Is it true?

I read somewhere that when using key based login instead of a password based login, it is not possible for a Man-in-the-Middle attack to happen. This question is not about what is being more secure: ...