MITM

Man in the Middle attacks can happen on wired networks, or on wireless networks.

For more on man in the middle attacks on wired networks, see Man in the Middle/Wired

For more on man in the middle attacks on wireless networks, see Man in the Middle/Wireless

What It Is

A man-in-the-middle attack is a general concept from encryption. It consists of two parties, Alice and Bob, trying to have an encrypted conversation. However, it is foiled by an attacker, Eve, who gets in the middle. This means that Alice and Eve communicate with one encryption key, while Bob and Eve communicate with another key.

The Key Pieces

Any man in the middle attack on a computer network must have three key pieces:

1. Tricking the router/network device/destination into thinking they are connected to the Sheep, when they are really connected to the Attacker

2. Tricking the Sheep into thinking they are really connected to their router/network device/destination, when they are really connected to the Attacker

3. Building a bridge between the two connections so that traffic can continue to pass between the two parties and be observed/modified.

Notes

Evil Twin Attack

2015-08-24

Man in the Middle/Evil Twin

I've built an Evil Twin, gotten the sheep to connect, built a working bridge from the sheep to the internet, and sniffed the traffic with tcpdump. However, Wireshark and Ettercap both failed to recognize the bridge or see traffic on it, and I'm not sure what to do with it.

2015-08-25

Eliminating the complexity that wireless signals introduce, and backing up a step to attempt a man in the middle attack on a wired network.

Man in the Middle/Wired/ARP Poisoning - ARP poisoning attack was successful. Learned a lot about what the target of an attack will see, and what they won't see.