Man-in-the-middle attack - Revision history

Jmanico: removing offensive image

2015-08-31T21:07:04Z

removing offensive image

2014-08-04T18:04:10Z

added reference

2009-04-23T11:44:11Z

2009-04-07T22:01:02Z

2009-02-16T13:17:12Z

‎References

2009-02-16T13:16:27Z

‎Examples

2009-02-16T13:16:09Z

‎Risk Factors

2009-02-16T13:14:36Z

2008-09-14T14:54:45Z

2008-09-14T14:53:51Z

‎Risk Factors

@@ Line 11: / Line 11: @@
 The man-in-the middle attack intercepts a communication between two systems. For example, in an http transaction the target is the TCP connection between client and server.
 Using different techniques, the attacker splits the original TCP connection into 2 new connections, one between the client and  the attacker and the other between the attacker and the server, as shown in figure 1. Once  the TCP connection is intercepted, the attacker acts as a proxy, being able to read, insert and modify the data in the intercepted communication.
 The MITM attack is very effective because of the nature of the http protocol and data transfer which are  all ASCII based. In this way, it’s possible to view and interview within the http protocol and  also in the data transferred. So, for example,  it’s possible to capture a session cookie reading the http header, but it’s also possible to change  an  amount of  money transaction inside the application context, as shown in figure 2.

@@ Line 70: / Line 70: @@
 * http://www.sans.org/reading_room/whitepapers/threats/480.php
 * http://cwe.mitre.org/data/definitions/300.html
 * http://en.wikipedia.org/wiki/Man-in-the-middle_attack
 [[Category:Spoofing]]
 [[Category:Attack]]

@@ Line 3: / Line 3: @@
 <br>
 [[Category:OWASP ASDR Project]]
 ==Description==

@@ Line 3: / Line 3: @@
 <br>
 [[Category:OWASP ASDR Project]]
 ==Description==

@@ Line 67: / Line 67: @@
 * http://www.sans.org/reading_room/whitepapers/threats/480.php
 * http://cwe.mitre.org/data/definitions/300.html
-* http://en.wikipedia.org/wiki/Mitm
+* http://en.wikipedia.org/wiki/Man-in-the-middle_attack
 [[Category:Spoofing]]
 [[Category:Attack]]

@@ Line 49: / Line 49: @@
 ==Examples==
 TBD
 ==Related [[Threat Agents]]==

← Older revision		Revision as of 13:16, 16 February 2009
Line 51:		Line 51:
	[[Category:FIXME\|need content here]]		[[Category:FIXME\|need content here]]

−	~~== Risk Factors ==~~
−	~~===Severity===~~
−	~~High~~

−	~~===Likelihood of exploitation===~~
−	~~Medium~~
−	~~[[Category:FIXME\|need content here]]~~

	==Related [[Threat Agents]]==		==Related [[Threat Agents]]==

@@ Line 62: / Line 62: @@
 * [[:Category:Authentication]]
 * [[:Category:Client-side Attacks]]
-* [[Category:FIXME|these aren't threat agents]]
+ [[Category:FIXME|these aren't threat agents]]
 ==Related [[Attacks]]==

@@ Line 57: / Line 57: @@
 ===Likelihood of exploitation===
 Medium
 ==Related [[Threat Agents]]==