Man-in-the-middle (MITM) describes a type of security attack where a device that is physically or logically situated between the sender and receiver impersonates them.

learn more… | top users | synonyms

0
votes
1answer
213 views

MITM Proxy - Checking Validation of SSL Certificate Chains

I am attempting to check our Android app's SSL Certificate Validation. I have MITM Proxy running on my Mac and am using the Mac as a Proxy for my Android phone. I can see all of the Android's http/s ...
0
votes
1answer
322 views

Exlude IP from Ettercap Hosts

I am messing around with Ettercap and performing some MITM on my own home network. I have Ettercap performing the MITM fine. I have my iPhone on the network and it autoadds the iPhone. I then run ...
3
votes
0answers
608 views

MITM the Android emulator

I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
1
vote
0answers
155 views

How to use Charles as proxy to decrypt HTTPS messages in Wireshark?

I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
0
votes
0answers
18 views

IP forwarding setup on Mac OS X

I’m writing a script—for Mac OS X only—that creates a “man-in-the-middle” (MITM) like attack with ARP poisoning for research purposes. Right now I am able to construct ARP packets to send to ...
0
votes
0answers
45 views

How to pass TCP-CONNECT from Internet through a Reverse Proxy to reach my local server?

I have this scenario: Some institutional severs between my institutional server and my VPS in Internet exist like men in the middle (Routers, Firewalls (NAT & Filters), DNS, SMTP relay, Proxy, ...
0
votes
0answers
104 views

iOS 8 https proxy not working

I use Cellist from the Mac App Store as a http/s proxy on my mac and it supposedly was possible to intercept https traffic via MITM attacks with it, but ever since iOS 8 there must have been a change ...
0
votes
0answers
20 views

How to setup a SMTP hook

I have an edimax ic3140w camera on a domestic alarm system which provides out of the box event notification through: - Email (SMTP) - FTP upload - Push Notifications ideally I'd like to have the ...
0
votes
0answers
73 views

Fiddler: Is it possible to replace/hide part of URL without affecting the content?

I'm using Fiddler debugging proxy, And the code below can intercept the server(YouTube) data and modify the HTML information before it reaches the client(my web broswer). if ...
0
votes
0answers
26 views

How to check what android application sends to the server?

I have 3rd party android application and I would like to see what it sends to its server. How could I do it? I've tried to use Wireshark on android to check it, but it uses https to send the data. Is ...
0
votes
0answers
32 views

Use Ettercap with unknown IP

Is it possible to ARP spoof a connection where one of the participants is only online for a split second with Ettercap (or another tool)? My scenario is a PXE booting client and I want to intercept ...
0
votes
0answers
97 views

TL-WR941ND proxy configuration

I'm running Honeyproxy (based on mitmproxy) server on localhost:8080 Is there a way to configure my TL-WR941ND router to use Honeyview proxy, so that I can see the traffic of every host connected to ...