3. MITM Attacks

Question 1

On-Path

Answer 1

Man-in-the-Middle:

1. Eavesdropping
2. Obtain information secretly
3. Allows control over network

Question 2

On-path positioning

Answer 2

1. Wireless: automatically allows On-Path attack

2. LAN requires physical connections

Question 3

On-path steps

Answer 3

1. position
2. victim is not aware
3. info collected

Question 4

APR Poisoning

Answer 4

Address Resolution Protocol - OSI Layer 2.

MITM mac address

Question 5

arpspoof

Answer 5

Tool for ARP Spoofing

Question 6

dnsspoof

Answer 6

sub dns for legit site

Question 7

bettercap

Answer 7

Tool for ARP and DNS poisoning

Question 8

Port Stealing

Answer 8

1. Works only in LANs

2. Uses victim’s MAC address

Question 9

SSL Stripping

Answer 9

converts HTTPS to HTTP

Redirect https port (80) to stripped http port (8080)

Question 10

sslstrip

Answer 10

tool for SSLSTRIPPING

Question 11

ARP Poisoning

Answer 11

Floods ARP tables