The tag has no wiki summary.

learn more… | top users | synonyms

-1
votes
1answer
45 views

Set up Ubuntu server to intercept traffic directed at another IP and send it to Apache? [closed]

I'm trying to reverse-engineer the protocol used by HP ePrint. For some reason the printer responds with an error when I override the DNS to point to my own local server, so I decided to create a ...
0
votes
2answers
59 views

Can a man in the middle intercept an SSL package and duplicate it?

AFAIK, SSL will encrypt the message under secure. But I still have the concern whether or not a man in the middle can catch the package and duplicate it e.g. 1000 times
0
votes
0answers
106 views

is there a man in the middle attacking to my server machine?

My server works well about half a year. But a strange thing happened (several hours before). This server has two IP-address 58.17.85.19 & 117.21.178.19 When I navigate to http://58.17.85.19, ...
-1
votes
1answer
28 views

identity stored in .ssh/known_host is different from the identy of the host itself [closed]

Guys what happens when the identity of the host i am trying to access is different from the identity listed on my ./ssh/known_hosts somebody told me that this scenario is desirable, why is that? And ...
0
votes
2answers
748 views

Man-In-The-Middle with a VPN?

I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done. I'm talking about a simple MITM attack but, in my ...
0
votes
1answer
222 views

Possible migrating openssh-server fingerprint?

I have upgrade my server to a new OS and newer hardware. But newly installed OS generated a new set of fingerprint / server keys. Is there anyway I could copy it from my old server to new server. In ...
8
votes
4answers
6k views

Setting up a transparent SSL proxy

I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
5
votes
3answers
232 views

Is a self signed cerificate secure from man in the middle once you have accepted it

I have a mail server that has a self signed SSL certificate. I use Thunderbird to access this server, and it asks me to accept this certificate. So lets say I accept this in a semi secure location, ...
2
votes
2answers
595 views

Simple working example of a Man-in-the-Middle attack?

I'm trying to research and patch a TLS renegotiation exploit which makes a website vulnerable to Man-in-the-Middle attacks. However, I don't understand how the attack occurs exactly and feel like a ...
2
votes
1answer
167 views

How rare is a man in the middle attack?

I was wondering if I should set up a secure connection for the db administration application (phpmyadmin) for my sites. They don't store credit cards nor anything that could be valuable for a hacker. ...
1
vote
1answer
982 views

How to configure squid for inspecting https requests and pages?

I wish to allow squid to block https requests by full URL regex matching (not just domain) and to block https responses by inspecting page contents. Is there some step by step guide for how to set ...
0
votes
3answers
2k views

man-in-the-middle attack over internet

i'm interested in understand the mechanism of man-in-the-middle attack. I know that, in a lan scenario, in order to do a mitm, an attacker needs to change the route-table (arp-poisoning). But in a ...
0
votes
3answers
733 views

Log an Application's Network Activity with Process Monitor and/or Fiddler or something else

I've got a bit of a tricky application I need to monitor. Its a Java .jnlp file. Using Process Monitor, I've been able to identify it (its instance of javaw) going out to the other servers in my ...
0
votes
1answer
344 views

Apache2: proxying all except one single file

I have a problem with MSDN Academy that they didn't solve. Unfortunately, the ISO image of Windows Server 2008 on their servers is misnamed. By using Wireshark, I found that the downloader erroneously ...
0
votes
2answers
1k views

Ettercap - packet injection / alteration

So I have a proxy setup using squid on port 3128. I also have ettercap setup. My main goal is to change data as it flows through my proxy. Basically, you open up www.something.com using my ...
3
votes
4answers
1k views

VPN - Man-in-the-middle when connecting to a https service?

Choosing an off-the-shelf VPN service, is it safe to access my Gmail, Paypal, ... accounts? The accounts are accessed via https, but I don't know if with a VPN there is one secure channel between my ...
2
votes
4answers
517 views

Man In The Middle Attacks vs. SSL Certificate Authorities

What stops someone from MITM-attacking the request to the certificate authority to verify the certificate? Does the browser come pre-loaded with the public keys of the trusted certificate authorities ...
2
votes
4answers
1k views

Man-in-the-middle attack in the SSL scenario

I'm trying to understand how would a man-in-the-middle attack affect my web server. I have a self-signed certificate. This certificate can be faked through the man-in-the-middle attack, which means ...
25
votes
7answers
3k views

MITM attacks - how likely are they?

How likely are "Man in the Middle" attacks in internet security? What actual machines, apart from ISP servers, are going to be "in the middle" of internet communications? What are the actual risks ...
2
votes
3answers
160 views

Once I ensure security out of the building, am I safe from Man in the Middle attacks?

Say I want to engage in an action that can be compromised through a man-in-the-middle attack (like key exchange). I've done my best to secure my end of the communication up until the point the network ...
2
votes
4answers
2k views

Open Source project that does SSL Inspection

I've been assigned to research out and spec replacing our old and decrepit http content filtering system. There are several open source filtering packages available but I've not come across one that ...
15
votes
5answers
41k views

How to remove strict RSA key checking in SSH and what's the problem here?

I have a Linux server that whenever I connect it shows me the message that changed the SSH host key: $ ssh root@host1 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: ...
2
votes
4answers
3k views

How can one perform a man-in-the-middle attack over a wireless connection?

I have recently setup a wireless network for a friend's business, and he asked me if there was any way someone could "hack" it. I assured him it would be extremely difficult once I setup a WPA2 key. ...