The man-in-the-middle tag has no wiki summary.
0
votes
0answers
19 views
Setting up a local transparent proxy [closed]
I set up a local transparent proxy to see what my own linux box was generating over HTTP, although I needed to run the proxy as root, otherwise the proxy itself couldn't get out.
# allow proxy ...
0
votes
2answers
114 views
Man-In-The-Middle with a VPN?
I'm doing some researches for university and, before wasting a lot of time into it, I'd like to know if what I've got in my mind can be done.
I'm talking about a simple MITM attack but, in my ...
0
votes
0answers
106 views
Wireless Man In the Middle Attack security meathods [closed]
I was researching some ways with which we can be secure from man in the middle attacks in a wireless network.
One way i came across was using Out-of band frequency.
Another way i came across was by ...
0
votes
1answer
96 views
Possible migrating openssh-server fingerprint?
I have upgrade my server to a new OS and newer hardware.
But newly installed OS generated a new set of fingerprint / server keys. Is there anyway I could copy it from my old server to new server. In ...
6
votes
3answers
3k views
Setting up a transparent SSL proxy
I've got a linux box set up with 2 network cards to inspect traffic going through port 80. One card is used to go out to the internet, the other one is hooked up to a networking switch. The point is ...
4
votes
3answers
197 views
Is a self signed cerificate secure from man in the middle once you have accepted it
I have a mail server that has a self signed SSL certificate.
I use Thunderbird to access this server, and it asks me to accept this certificate.
So lets say I accept this in a semi secure location, ...
2
votes
2answers
470 views
Simple working example of a Man-in-the-Middle attack?
I'm trying to research and patch a TLS renegotiation exploit which makes a website vulnerable to Man-in-the-Middle attacks. However, I don't understand how the attack occurs exactly and feel like a ...
2
votes
1answer
147 views
How rare is a man in the middle attack?
I was wondering if I should set up a secure connection for the db administration application (phpmyadmin) for my sites.
They don't store credit cards nor anything that could be valuable for a hacker.
...
1
vote
1answer
522 views
How to configure squid for inspecting https requests and pages?
I wish to allow squid to block https requests by full URL regex matching (not just domain) and to block https responses by inspecting page contents.
Is there some step by step guide for how to set ...
0
votes
3answers
860 views
man-in-the-middle attack over internet
i'm interested in understand the mechanism of man-in-the-middle attack.
I know that, in a lan scenario, in order to do a mitm, an attacker needs to change the route-table (arp-poisoning).
But in a ...
0
votes
3answers
547 views
Log an Application's Network Activity with Process Monitor and/or Fiddler or something else
I've got a bit of a tricky application I need to monitor. Its a Java .jnlp file. Using Process Monitor, I've been able to identify it (its instance of javaw) going out to the other servers in my ...
0
votes
1answer
218 views
Apache2: proxying all except one single file
I have a problem with MSDN Academy that they didn't solve. Unfortunately, the ISO image of Windows Server 2008 on their servers is misnamed. By using Wireshark, I found that the downloader erroneously ...
0
votes
2answers
792 views
Ettercap - packet injection / alteration
So I have a proxy setup using squid on port 3128.
I also have ettercap setup.
My main goal is to change data as it flows through my proxy.
Basically, you open up www.something.com using my ...
3
votes
4answers
1k views
VPN - Man-in-the-middle when connecting to a https service?
Choosing an off-the-shelf VPN service, is it safe to access my Gmail, Paypal, ... accounts?
The accounts are accessed via https, but I don't know if with a VPN there is one secure channel between my ...
1
vote
4answers
459 views
Man In The Middle Attacks vs. SSL Certificate Authorities
What stops someone from MITM-attacking the request to the certificate authority to verify the certificate? Does the browser come pre-loaded with the public keys of the trusted certificate authorities ...
2
votes
4answers
1k views
Man-in-the-middle attack in the SSL scenario
I'm trying to understand how would a man-in-the-middle attack affect my web server.
I have a self-signed certificate. This certificate can be faked through the man-in-the-middle attack, which means ...
22
votes
7answers
2k views
MITM attacks - how likely are they?
How likely are "Man in the Middle" attacks in internet security?
What actual machines, apart from ISP servers, are going to be "in the middle" of internet communications?
What are the actual risks ...
2
votes
3answers
141 views
Once I ensure security out of the building, am I safe from Man in the Middle attacks?
Say I want to engage in an action that can be compromised through a man-in-the-middle attack (like key exchange). I've done my best to secure my end of the communication up until the point the network ...
2
votes
4answers
1k views
Open Source project that does SSL Inspection
I've been assigned to research out and spec replacing our old and decrepit http content filtering system. There are several open source filtering packages available but I've not come across one that ...
11
votes
3answers
31k views
How to remove strict RSA key checking in SSH and what's the problem here?
I have a Linux server that whenever I connect it shows me the message that changed the SSH host key:
$ ssh root@host1
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: ...
2
votes
4answers
3k views
How can one perform a man-in-the-middle attack over a wireless connection?
I have recently setup a wireless network for a friend's business, and he asked me if there was any way someone could "hack" it. I assured him it would be extremely difficult once I setup a WPA2 key.
...
