Collaborate Disseminate
I’m trying to create a lab environment to experiment with MiTM attacks. I want to learn docker also so I’ve decided to do this with docker. I created 2 images (attacker, victim):
Victim – based on Alpine, with curl installed
Attacker – bas… Continue reading How docker is translating docker0 interface ip address to host ip address
As the question states.
In case someone doesn’t know – in the modern Russia there exists a "global firewall" (not sure what’s the real name is) with the purpose of blocking web-sites that are not permitted to be viewed to the res… Continue reading How can the Russian "Global Firewall" block traffic from outside?
What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in plain text. What are some others?
Also… Continue reading What type of attacks does HTTPS protect against?
If I connect to my VPN and then run arp -a the MAC address of my router changes to 00:00:00:00:00:02. Is this normal behaviour? What is the reasoning behind this?
Furthermore a MAC address spoofing is only of real concern when there are mo… Continue reading MAC address of router changes when i connect to VPN
I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic.
Is there any way to decrypt the traffic except extracting master secret … Continue reading Intercepting TLS 1.2 connections
I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL from the IP really).
sudo bettercap –eval… Continue reading At times bettercap ARP sniffing works great and at times not at all, what would be the reason?
I have some difficulties wrapping my head around the following concept:
When HTTPS inspection (outbound) is enabled on a NextGen Firewall (NGFW) e.g. CheckPoint, a certificate has to be installed on the NGFW. These certificates (or at leas… Continue reading HTTPS inspection and TLS certificates
I have some difficulties wrapping my head around the following concept:
When HTTPS inspection (outbound) is enabled on a NextGen Firewall (NGFW) e.g. CheckPoint, a certificate has to be installed on the NGFW. These certificates (or at leas… Continue reading HTTPS inspection and TLS certificates
In general browsers attempt to establish a HTTPs-Connection if possible. How would you force a browser to fallback to HTTP when somebody enters asdf.xyz in the search bar of his/her browser without specifying a protocol?
Therefore: sslstri… Continue reading Man in the middle using HTTPs downgrade to HTTP
As far as I understand it, the address of a v3 onion service is simply an ed25519 public key itself. Assuming the end user actually managed to acquire the legitimate 56 character .onion address (i.e. without getting phished/given a fake), … Continue reading MiTM attack on a Tor V3 Onion Service?