Collaborate Disseminate
Man-in-the-Middle is not working with my router (Huawei) on my Windows machine/any device.
But it works with another router on my same Windows machine/any device.
When I doing MITM with Huawei router:
Linux MAC: a0:af:bd:c5:21:87
Router… Continue reading Why Man In The Middle (MITM) is not working with my router?
I have an IOT System that works the following way:
The IOT bridge makes a TCP Handshake with a server in china with a static ip address 47.255…
(bridge sends syn the china server sends syn ack and then bridge ack)
Then the bridge sends M… Continue reading Redirect Ip Address (not dns) with Router [closed]
Let’s assume an insecure communication channel.
Alice makes a public key (we assume is PGP, but any asymmetric crypto could be used unless it doesn’t have fingerprints for checking) and sends it to Bob.
Then, Alice sends to Bob a photo of … Continue reading Can we check fingerprint with photos?
I have recently started using Burp as a proxy for hunting bugs on websites and I see many submissions where people have intercepted and modified requests/responses to exploit certain logic flaws in web applications. However, this is possib… Continue reading Burp Proxy vs MITM
The Star recently published an article describing an alleged attack against a Moroccan journalist. The article describes the attack as such:
Forensic evidence gathered by Amnesty International on Radi’s phone shows that it was infected by… Continue reading Does HTTPS protect mobile internet connections against "network injection"?
I would like to create a POC of Google MFA phishing on my own Google account. I installed theses tools:
https://github.com/drk1wi/Modlishka
https://github.com/kgretzky/evilginx2
On each of theses tools there is a problem which prevent ac… Continue reading Is there a way in 2020 to phish Google account MFA? [closed]
Some companies install software on corporate VPNs which also come with a root certificate installed on all employees’ machines. This allows for encrypted traffic to be decrypted by technology installed on the VPN. Some companies even have … Continue reading Is it possible to craft a certificate signing chain that thwarts MITM corporate VPNs?
You can see that the two fingerprints differ, the second(nThbg6…) is the legit that can be found here:
https://help.github.com/en/github/authenticating-to-github/githubs-ssh-key-fingerprints
I couldn’t find anything about the first(Pczi… Continue reading SSH fingerprints(GitHub) differ when connecting to different routers
I’m just wondering if it is technically possible for your ISP to work with a certificate authority (either compelled by a government agency or otherwise) to create a MITM attack to see into your https traffic. I’ve used a few MITM servers… Continue reading Could a certificate authority and a ISP preform a MITM attack on HTTPS traffic?
I’m trying to analyze a SSLv3 connection. The certificate of the server has a "MD5 with RSA" signature. So I was setting up a local man in the middle attack by setting up a local DNS server that would return a local IP address to… Continue reading Forge certificate for man in the middle attack