On-path Attacks 2.4

Question 1

On-Path Attack

Answer 1

• Formerly known as a Man in the Middle Attack
• An attacker places themselves of two hosts communicating with each other.
• The attacker can monitor and redirect traffic traversing the network.

Question 2

Access Resolution Protocol (ARP)

Answer 2

• Helps a device know where to send a packet to.
• Uses a MAC or layer 2 addresses

Question 3

ARP Message Types

Answer 3

• ARP Request
• ARP Reply
• Reverse ARP Request
• RARP Reply

Question 4

ARP Poisoning

Answer 4

• Also known as, ARP spoofing
• Attacker can send messages, corrupt ARP table, and cause packets to be misrouted.

Question 5

On-Path Browser Attack

Answer 5

• A MITM attack, formerly “Man in the Browser Attack”
• Involves browser helper objects and browsers to conduct attacks

Question 6

Process of an On-Path Browser Attack

Answer 6

• Malware/Trojan will do all of the proxy work
• Everything will look normal on the victim’s device.
• Malware waits for the user to login into something important.