Questions tagged [man-in-the-middle]

An attacker who interposes himself in the middle of a connection.

An attacker who interposes himself between a client and a server. He can perpetrate both passive (eavesdropping) and active (interjection or truncation) attacks. Secure protocols such as HTTPS can guard against these attacks when correctly implemented at all layers including the application layer.

215 questions
-1
votes
3 answers

Installed SSL certificate but still exposed to man in the middle attack

I have installed a SSL certificate (comodo PositiveSSL) for my domain and forced NGINX to only use HTTPS. I run the test on SSL analyzer https://sslanalyzer.comodoca.com/?url=domain.com Validation Type Domain Validated (DV) Trusted by Microsoft? …
Q8root
  • 1,243
  • 3
  • 25
  • 48
-1
votes
1 answer

Is it possible for a proxy server to forge it's certificate SSL Pinning?

If a client receives a server's certificate typically during handshake, why can't a man in the middle attack proxy client just use the same certificate that will be sent from an authentic server? Certificates are meant to be public, if I'm not…
ipalibowhyte
  • 1,553
  • 2
  • 22
  • 34
-2
votes
1 answer

Man in the middle attack for UART

Is it safe to use the serial port for sending sensitive information? For instance, bank credentials, passwords, etc...? We have a hardware-based safe that people can save sensitive information. The hardware is safe because it's totally offline.…
Luis Cruz
  • 1,488
  • 3
  • 22
  • 50
-2
votes
2 answers

PHP - Anti mitm attack idea

I've got an idea against mitm(man-in-the-middle) attacks that i'd like to implement to my site, so i decided to ask you how secure this is. First i'd get 10 page loading times from the client computer in seconds. Then i'd calculate the standard with…
Jojo Coana
  • 31
  • 6
-3
votes
1 answer

MiTM with wireshark

I'm trying to do MiTM on my home wi-fi. I'm a complete newbie. I have macOS. I downloaded wireshark, executed it, chose wi-fi en0, entered "eapol" in filters, reconnected on my phone to the wi-fi, but nothing showed up in the wireshark's console.…
1 2 3
14
15