Questions tagged [man-in-the-middle]
Man-in-the-middle (MITM) describes a type of security attack where a device that is physically or logically situated between the sender and receiver impersonates them.
49
questions
0
votes
0
answers
32
views
Attackers monitored my gcp VM and front-run every action I made [closed]
I made a high frequency tradebot hosted in my GCP VM. It monitors orderbook on an exchange through WebSocket and send orders through their RESTful API.
What happened
Since few weeks ago, it keep ...
- 101
-1
votes
1
answer
45
views
Can you get the network password when someone tries to connect?
could you get the network password of a network if a device tries to connect to the network by name with the password, but the network is basically a MITM Network?
I don't know how to formulate this ...
- 17
0
votes
1
answer
1k
views
How to intercept data transmission on a LAN?
I have a piece of electrical hardware (a power inverter) which is hard wired to my router and transmits usage data to a third party vendor at regular intervals. The vendor provides a convenient web ...
0
votes
0
answers
46
views
using iptables nat to connect two machines unaware of each other
I have done it several times in the past, but after more than 10 years that I've been away from networking, I just cannot make it work again:
I have three machines, A B and C. Both A and B can see C, ...
- 1
0
votes
0
answers
149
views
How to perform Man in The Middle between two link local ipv6 addresses
I'm trying to do a Man In The Middle between a computer and a device which communicate only using IPv6 link-local addresses.
I've used ettercap in a Kali Linux VM to successfully put myself between ...
I C
4
votes
5
answers
34k
views
Unable to to install sslstrip in kali linux with "apt-get install sslstrip" causes error "Unable to locate package sslstrip"
I have a kali linux vm provided by my university. It doesn't seem to have sslstrip preinstalled.
When I try to install it, I get this error
root@kali:~# sudo apt-get update && apt-get ...
- 141
-2
votes
1
answer
80
views
How can I sniff the traffic used to set options on the router?
I'm sorry if this ends up being a duplicate; I have read a number of similar questions on here, but none seems to quite fit what I'm asking.
My broadband provider, Vodafone, gives my the ability to '...
- 171
1
vote
1
answer
3k
views
How can I make Firefox ignore certificate issuer errors?
I'm browsing from behind a Firewall using this weird proxy server, which essentially acts like a man-in-the-middle and switches up the SSL certificate of the server with its own. So the certificates ...
- 8,824
3
votes
1
answer
3k
views
Open captive portal in regular browser?
I just read this question How does Firefox know my ISP login page? which made me think of a related issue:
On all devices I have, the captive portal is opened using, I guess, a "browser view" rather ...
- 646
0
votes
1
answer
93
views
Sniff ethernet communication
I have a setup in which I'm connected to a switch and there are 2 more devices there. Just protocol converters ... that have recently stopped working.
Since this equipment doesn't have any type of ...
- 123
1
vote
2
answers
333
views
Have contents of email have been changed in transit?
A colleague of mine received some bank details in an unsecured email from a company. He used the details in the email to pay a sum of money into an account.
The company that sent him the email to him ...
- 11
1
vote
1
answer
501
views
Fluxion disconnecting both of my external and internal wifi cards
I installed fluxion in raspberry pi so i can use it on the go. I mainly connect to my pi using ssh and vnc. I plugged an external wifi adapter to my PI to support monitor mode, but when I select my ...
Abhiram
0
votes
1
answer
387
views
SSH to router shows man in the middle attack, am I being attacked?
This starts to happen after I changed certain things. I am in the progress learning how to setup my own server at home, have that server be accessible in public outside my LAN.
In the mist of trying ...
0
votes
1
answer
280
views
Does Ap Isolation protect from Middle Man Attacks?
So the network I am connected to has the feature ap isolation and I do understand the meaning of ap isolation, is in summary the imposibility for any device to communicate with some other with the ...
- 1
3
votes
0
answers
475
views
MITM redirecting to my own NTP server, blocking traffic to Apple NTP pool
CONFIGURATIONS
ipv4.forwarding 1 (ON)
arp_cache_poisoning between VICTIM & D.G.. (192.168.1.100 & 192.168.1.1)
**LAN**
VICTIM: 192.168.1.100
ATTACKER: ...
- 31
12
votes
1
answer
22k
views
How to remove Bitdefender root certificate from Firefox/Thunderbird/Chrome
I'm using "Bitdefender Antivirus Free Edition 1.0.9.54" on my Windows 10 home PC
Antimalware Engine 7.73769
During the last days I got a popup which asked me to shutdown Firefox/Thunderbird/Chrome in ...
- 241
0
votes
1
answer
76
views
Is there any possibility of a man in the middle attack?
Sorry if my question sounds dumb, maybe it is, I am worried about a detail that I have noticed.
If I was more expert about the topic I am going to ask you about I would certainly not ask about it, so ...
- 3
0
votes
1
answer
269
views
Iptables sometimes don't work like I think they should
I'm trying to do a man-in-the-middle attack on my local network and I'm trying to replace the navigationshilfe1.t-online.de server with my own server. Later I want to replace a custom service instead ...
- 3
0
votes
1
answer
392
views
Thunderbird asks for passwords after some time from setting up the accounts. Passwords expiration?
When connecting email accounts to Thunderbird, I've checked remember this password option.
But after a few weeks of password reentering-free life, it asks for the passwords yet again, out of the blue.
...
- 135
1
vote
1
answer
163
views
Why are some websites seemingly immune to self-signed certificate MitM attacks?
I recently did an experiment using MitM to gain account information (username and password) while accessing websites. I used two PCs in the scenario; one as the target, running Internet Explorer, and ...
- 121
1
vote
1
answer
377
views
Usb comms intercepter
I have a question about intercepting and recording USB between two devices. First, let me give y'all a bit of background.
I'm trying to connect a USB device, an Anritsu PSN50 power meter to my ...
- 21
2
votes
1
answer
2k
views
Web WhatsApp doesn't show behind proxy
I have proxy with SSL bump configured. While this is on, WhatApp we doesn't show, why?
- 12.3k
2
votes
1
answer
5k
views
Is my router trying to MITM my office365 connection?
I recently installed a new BT HomeHub6 router for my household internet connection. It's been less than 24 hours, and I'm seeing a warning pop up on my desktop computer occasionally regarding Outlooks'...
- 121
128
votes
8
answers
789k
views
How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Chrome?
My work place intercepts SSL connections, looks at their contents, and then passes the data to and from my machine and remote hosts - a kind of man-in-the-middle attack. This is not uncommon in ...
- 3,401
1
vote
0
answers
3k
views
namebench says hosts are being hijacked by my DNS - is this for real?
I've been experiencing strange and annoying latency issues with my connection, despite the bandwidth seeming ok - especially latency with name resolution. So, I just ran Google namebench. So, it gave ...
- 8,824
2
votes
1
answer
114
views
Can't get windows host file to forward HTTPS headers
I'm currently trying to write a proxy in C# using the host file to redirect requests (specific request). I only want it to intercept one address.
It's on Windows and the proxy is run locally on the ...
William Humphreys
3
votes
1
answer
191
views
Paypal shows red https in chrome, and only in Chrome.. is this cause for concern?
Firefox seems to be OK with it, but I don't want to log in on any browser in case I have some malware doing this. However I can't seem to find anything, so I'm not sure what it is.
Chrome says it's ...
anonymous
0
votes
0
answers
104
views
EVIL AP - Internet connection bridging issue
I've been trying to create an EVIL AP scenario in my test lab for a couple of days, but I always face the same issue.
I can connect to the WIFI adapter and I receive an IP address etc, via dhcp.
...
Ron
1
vote
0
answers
84
views
Security of Time Machine's AFP connection
I use Time Machine to backup my Mac over the Internet on a Synology server. TM connects throught AFP protocol, it this protocol resistent to Man-in-the middle attack (attacker can't steal creditials ...
- 121
0
votes
0
answers
1k
views
Problem creating evil twin using airbase-ng
I am trying to create an evil twin access point using airbase-ng.I am creating a hotspot using my mobile and connecting anther mobile to this hotspot.Now I am trying to create an evil twin access ...
faraz khan
2
votes
0
answers
1k
views
iOS 8 https proxy not working
I use Cellist from the Mac App Store as a http/s proxy on my mac and it supposedly was possible to intercept https traffic via MITM attacks with it, but ever since iOS 8 there must have been a change ...
- 153
3
votes
1
answer
9k
views
How to use Charles as proxy to decrypt HTTPS messages in Wireshark?
I know I can view decrypted HTTPS data directly in Charles. But I want to view lower level SSL messages in Wireshark. So I setup Charles as the SSL proxy, using my own certificate, and I setup SSL ...
- 149
7
votes
1
answer
321
views
Repeater injected to my network?
I know this is not that kind of support website but on the other side I found my problem very fascinating so I'll post it anyway.
Yesterday all of my machines disconnected from my home network.
It ...
- 171
0
votes
1
answer
1k
views
MITM Proxy - Checking Validation of SSL Certificate Chains
I am attempting to check our Android app's SSL Certificate Validation.
I have MITM Proxy running on my Mac and am using the Mac as a Proxy for my Android phone. I can see all of the Android's http/s ...
- 171
2
votes
1
answer
325
views
Using CERT Tapioca on VM
I have been attempting to get CERT Tapioca (http://www.cert.org/blogs/certcc/post.cfm?EntryID=203) running on my Mac so that I can test the SSL/HTTPS security of our Android app.
Up to this point, I ...
- 171
0
votes
1
answer
2k
views
Fiddler: Is it possible to replace/hide part of URL without affecting the content?
I'm using Fiddler debugging proxy, And the code below can intercept the server(YouTube) data and modify the HTML information before it reaches the client(my web broswer).
if (oSession.HostnameIs("...
- 21
-1
votes
2
answers
322
views
If man-in-the-middle attacks are rare, is Heartbleed as serious as suggested? [closed]
I connect to the internet on a secured wireless connection. I'm pretty sure nobody has MITM'd me on my LAN. How else could someone using Heartbleed to steal private keys access my data? I understand ...
- 1
4
votes
2
answers
1k
views
Router eavesdropping on SSH tunnel?
So I'm on a public WiFi network that blocks websites like YouTube in order to conserve bandwidth. I'm assuming the router is monitoring all traffic and rejecting all requests sent to the sites on its ...
- 141
7
votes
1
answer
10k
views
Inspecting websocket traffic with proxy
I'm using Charles Proxy to inspect traffic from my Android apps. I have the phone configured to proxy all traffic through Charles, which is installed on my PC.
Everything has worked thus far (HTTP/...
- 403
-2
votes
3
answers
4k
views
How to stop my brother's MitM attack
My brother's repeatedly locking my computer with his phone using a man-in-the-middle attack and screwing up my DNS cache.
How can I get my computer to refuse to interact with 192.168.0.65 and prevent ...
0
votes
1
answer
1k
views
Exlude IP from Ettercap Hosts
I am messing around with Ettercap and performing some MITM on my own home network.
I have Ettercap performing the MITM fine. I have my iPhone on the network and it autoadds the iPhone. I then run ...
- 101
4
votes
0
answers
998
views
MITM the Android emulator
I am trying to man-in-the-middle the Android emulator so I can decrypt the SSL-traffic with sslsniff. The problem is that the traffic doesn't seem to get routed through sslsniff, even when I have ...
- 651
3
votes
2
answers
172
views
How does HTTPS avoids the key for encryption to be sniffed in the first place?
When a 2 computer establish an HTTPS connection them have to resolve what key is going to be used, right?
So, to do that, at some point the key have to travel unencrypted from one computer to another,...
- 1,612
2
votes
2
answers
681
views
Tricks for truly securing SSH connections
I know SSH is secure as long as you're not suffering a MITM attack, but I want to know if there's a way to make SSH 100% secure even under such circumstances, discover you're being sniffed and ...
- 133
4
votes
4
answers
951
views
Strange phishing attack?
When I login to wachovia/wells fargo/amazon/paypal , no matter the user/pass that I insert, i get a "we need to verify your information" page where they ask me everything, from the atm pin to my ssn ...
- 3,580
1
vote
2
answers
359
views
how to use open wi-fi without a VPN, but remaining secure?
Is there a way to use open wi-fi with your laptop, but WITHOUT using a VPN solution, in a secure fashion? (i.e. to avoid man in the middle, passwords in the clear etc)
For example all that comes to ...
- 309
3
votes
4
answers
18k
views
Detecting man-in-the-middle attacks?
There seem to be many possible ways to create man-in-the-middle attacks on public access points, by stealing the access point's local IP address with ARP spoofing. The possible attacks range from ...
- 3,503
2
votes
3
answers
364
views
How do I avoid the new SSL vulnerability?
What can I do today to avoid the new SSL vulnerability?
I have been listening to the Security Now podcast, episode 223: "The Trouble With SSL". MP3 for episode 223 (42 MB). Transcript.
...
- 12.1k
271
votes
11
answers
811k
views
Remove key from known_hosts
I built several virtual machines during the last few weeks. The problem is, the .ssh/known_hosts gives me the Man in the middle warning. This happens because another fingerprint is associated with the ...
- 8,090