New answers tagged man-in-the-middle
2
votes
How do IoT devices know the checksum of firmware upgrades?
A checksum would indeed verify it's integrity. It would be transferred with the firmware update and the device could ensure integrity based on the checksum.
However, this would not stop MITM. For ...
- 836
2
votes
Accepted
How do IoT devices know the checksum of firmware upgrades?
I'm not sure what source of information you had that suggested that only a checksum is used for validating the firmware.
Established approaches for software updates (which includes firmware)
use ...
- 181k
1
vote
How to perform MitM against SSL/TLS when certificate owned?
This could either be decrypted on the fly, or saved so I can decrypt it at a later date, either approach is fine.
You're gonna have to go with decrypted on the fly. The certificate + private key is ...
- 57k
0
votes
How is man-in-the-middle attack prevented in TLS?
If the attacker can only capture packets, it's not a MitM attack but simply eavesdropping. And in this case, in modern TLS with ephemeral keys (DHE, Ephemeral Diffie-Hellman, or ECDHE suites) the ...
- 4,226
0
votes
Accepted
Burp suite: URL encoding of request body - Is this safe?
I assume that you encountered the content-type application/x-www-form-urlencoded for POST data, which is the default type if nothing else is given in a form. As the name suggests - the request body is ...
- 181k
Top 50 recent answers are included