Revision as of 06:54, 23 August 2015

What It Is

A man-in-the-middle attack is a general concept from encryption. It consists of two parties, Alice and Bob, trying to have an encrypted conversation. However, it is foiled by an attacker, Eve, who gets in the middle. This means that Alice and Eve communicate with one encryption key, while Bob and Eve communicate with another key.

Wired Network

Man-in-the-middle attacks on a wired network are explained on the Man in the Middle/Wired page.

Wireless Network

A wireless network man-in-the-middle attack can be conducted a couple of different ways.

ARP Cache Poisoning

If you are actually on the wireless network, you can conduct a man-in-the-middle attack by masquerading as someone else via ARP poisoning, which allows you to spoof another MAC address on the same network. Normally, this is done on a wired network (see Man in the Middle/Wired), but this can be done on most home routers that have a swtich connected to the wireless router.

Evil Twin Access Point

If you are not on the wireless network, but are physically located close to the client, you can conduct a man-in-the-middle attack using an EvilTwin access point attack.

The EvilTwin page describes how the wireless attack takes place. however, this page only describes how a client is tricked into connecting to a spoofed access point (which is actually the attacker's wireless card). This is just the setup for a man in the middle attack.

Once the sheep/client is connected to the Evil Twin, the Man in the Middle/Evil Twin attack can occur.

@@ Line 5: / Line 5: @@
 =Wired Network=
-Trying Man in the Middle attack with ARP spoofing on a wired network. The configuration:
+Man-in-the-middle attacks on a wired network are explained on the [[Man in the Middle/Wired]] page.
-<pre>
-+----[Target laptop]
-|
-|      +---[Raspberry Pi]
-|      |
-|      |
-[Router]
-</pre>
-==How It Will Work==
+=Wireless Network=
-This (wired) man in the middle attack will work by using the Pi to spoof the MAC address of the target.
-==Preparing the Pi==
+A wireless network man-in-the-middle attack can be conducted a couple of different ways.
-First, plug the Pi into the router.
+==ARP Cache Poisoning==
-===Getting a Reverse Shell to the Pi===
+If you are actually on the wireless network, you can conduct a man-in-the-middle attack by masquerading as someone else via ARP poisoning, which allows you to spoof another MAC address on the same network. Normally, this is done on a wired network (see [[Man in the Middle/Wired]]), but this can be done on most home routers that have a swtich connected to the wireless router.
-See [[RaspberryPi/Reverse SSH]] page for instructions on creating a startup executable on the Raspberry Pi that will create a reverse SSH connection to an outside command and control server. This gives you a backdoor ssh shell onboard the Raspberry Pi. Hooray!
+==Evil Twin Access Point==
-===Circumventing IDS===
+If you are not on the wireless network, but are physically located close to the client, you can conduct a man-in-the-middle attack using an [[EvilTwin]] access point attack.
-Intrusion detection systems can detect SSH traffic based on the traffic looking different, regardless of what port.
+The [[EvilTwin]] page describes how the wireless attack takes place. however, this page only describes how a client is tricked into connecting to a spoofed access point (which is actually the attacker's wireless card). This is just the setup for a man in the middle attack.
-=Wireless Network=
+Once the sheep/client is connected to the Evil Twin, the [[Man in the Middle/Evil Twin]] attack can occur.
-To conduct a man-in-the-middle attack over wifi, we'll need to set things up in one of a couple of different ways.
-I'll cover the [[EvilTwin]] attack, where an attacker fakes being an access point in order to trick a sheep into connecting to it. This creates a scenario in which the attacker may successfully carry out a man-in-the-middle attack.
 {{AircrackFlag}}
 [[Category:Wireless]]
 [[Category:Security]]

MITM: Difference between revisions

From charlesreid1