Man-in-the-middle (MITM) describes a type of security attack where a device that is physically or logically situated between the sender and receiver impersonates them.

learn more… | top users | synonyms

0
votes
0answers
81 views

Problem creating evil twin using airbase-ng

I am trying to create an evil twin access point using airbase-ng.I am creating a hotspot using my mobile and connecting anther mobile to this hotspot.Now I am trying to create an evil twin access ...
0
votes
0answers
16 views

Why would my logged public IP differ depending on the type of server (or computer) I am connecting to?

I am writing a p2p gaming lan emulator that uses the torrent infrastructure to network peers, set up lobbies, etc. Currently, the only infrastructure we are using is the trackers (we plan to us Tox ...
0
votes
0answers
39 views

IP forwarding setup on Mac OS X

I’m writing a script—for Mac OS X only—that creates a “man-in-the-middle” (MITM) like attack with ARP poisoning for research purposes. Right now I am able to construct ARP packets to send to ...
0
votes
0answers
108 views

How to pass TCP-CONNECT from Internet through a Reverse Proxy to reach my local server?

I have this scenario: Some institutional severs between my institutional server and my VPS in Internet exist like men in the middle (Routers, Firewalls (NAT & Filters), DNS, SMTP relay, Proxy, ...
1
vote
0answers
451 views

iOS 8 https proxy not working

I use Cellist from the Mac App Store as a http/s proxy on my mac and it supposedly was possible to intercept https traffic via MITM attacks with it, but ever since iOS 8 there must have been a change ...
0
votes
0answers
28 views

How to setup a SMTP hook

I have an edimax ic3140w camera on a domestic alarm system which provides out of the box event notification through: - Email (SMTP) - FTP upload - Push Notifications ideally I'd like to have the ...
2
votes
1answer
471 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
7
votes
1answer
249 views

Repeater injected to my network?

I know this is not that kind of support website but on the other side I found my problem very fascinating so I'll post it anyway. Yesterday all of my machines disconnected from my home network. It ...
0
votes
1answer
291 views

MITM Proxy - Checking Validation of SSL Certificate Chains

I am attempting to check our Android app's SSL Certificate Validation. I have MITM Proxy running on my Mac and am using the Mac as a Proxy for my Android phone. I can see all of the Android's http/s ...
1
vote
1answer
148 views

Using CERT Tapioca on VM

I have been attempting to get CERT Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) running on my Mac so that I can test the SSL/HTTPS security of our Android app. Up to this point, I ...
0
votes
1answer
148 views

Fiddler: Is it possible to replace/hide part of URL without affecting the content?

I'm using Fiddler debugging proxy, And the code below can intercept the server(YouTube) data and modify the HTML information before it reaches the client(my web broswer). if ...
0
votes
0answers
39 views

How to check what android application sends to the server?

I have 3rd party android application and I would like to see what it sends to its server. How could I do it? I've tried to use Wireshark on android to check it, but it uses https to send the data. Is ...
0
votes
0answers
32 views

Use Ettercap with unknown IP

Is it possible to ARP spoof a connection where one of the participants is only online for a split second with Ettercap (or another tool)? My scenario is a PXE booting client and I want to intercept ...
-1
votes
2answers
281 views

If man-in-the-middle attacks are rare, is Heartbleed as serious as suggested? [closed]

I connect to the internet on a secured wireless connection. I'm pretty sure nobody has MITM'd me on my LAN. How else could someone using Heartbleed to steal private keys access my data? I understand ...
4
votes
2answers
279 views

Router eavesdropping on SSH tunnel?

So I'm on a public WiFi network that blocks websites like YouTube in order to conserve bandwidth. I'm assuming the router is monitoring all traffic and rejecting all requests sent to the sites on its ...
4
votes
1answer
2k views

Inspecting websocket traffic with proxy

I'm using Charles Proxy to inspect traffic from my Android apps. I have the phone configured to proxy all traffic through Charles, which is installed on my PC. Everything has worked thus far ...
-3
votes
3answers
866 views

How to stop my brother's MitM attack

My brother's repeatedly locking my computer with his phone using a man-in-the-middle attack and screwing up my DNS cache. How can I get my computer to refuse to interact with 192.168.0.65 and prevent ...
0
votes
1answer
371 views

Exlude IP from Ettercap Hosts

I am messing around with Ettercap and performing some MITM on my own home network. I have Ettercap performing the MITM fine. I have my iPhone on the network and it autoadds the iPhone. I then run ...
4
votes
0answers
644 views

MITM the Android emulator

I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
3
votes
2answers
139 views

How does HTTPS avoids the key for encryption to be sniffed in the first place?

When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right? So, to do that, at some point the key have to travel unencrypted from one computer to ...
2
votes
2answers
482 views

Tricks for truly securing SSH connections

I know SSH is secure as long as you're not suffering a MITM attack, but I want to know if there's a way to make SSH 100% secure even under such circumstances, discover you're being sniffed and ...
4
votes
4answers
823 views

Strange phishing attack?

When I login to wachovia/wells fargo/amazon/paypal , no matter the user/pass that I insert, i get a "we need to verify your information" page where they ask me everything, from the atm pin to my ssn ...
0
votes
2answers
228 views

how to use open wi-fi without a VPN, but remaining secure?

Is there a way to use open wi-fi with your laptop, but WITHOUT using a VPN solution, in a secure fashion? (i.e. to avoid man in the middle, passwords in the clear etc) For example all that comes to ...
3
votes
4answers
11k views

Detecting man-in-the-middle attacks?

There seem to be many possible ways to create man-in-the-middle attacks on public access points, by stealing the access point's local IP address with ARP spoofing. The possible attacks range from ...
2
votes
3answers
348 views

How do I avoid the new SSL vulnerability?

What can I do today to avoid the new SSL vulnerability? I have been listening to the Security Now podcast, episode 223: "The Trouble With SSL". MP3 for episode 223 (42 MB). Transcript. Update: nine ...
61
votes
8answers
119k views

Remove key from known_hosts

I built several virtual machines during the last few weeks. The problem is, the .ssh/known_hosts gives me the Man in the middle warning. This happens because another fingerprint is associated with the ...