SSL MITM Attack Over Wireless

SSL Man in the Middle Attack has grown to become one of the most common way of exploiting victims. This attack requires that the Hacker places himself in the middle of all communication happening between victim and another destination host. In order to do this on the wired side, ARP cache poisoning and traffic rerouting have been the most prevalent techniques used. On the wireless side hijacking Layer 2 and above is whole different game. Among the various techniques which can be used, the most common one seen in the wild is using a Honeypot. A wireless Honeypot is a Hacker controlled Access Point (generally a soft AP) which lures victims to connect to it. Once the victim connects to the Honeypot, the hacker has full control of the Internet traffic sent and received by the victim. In this video we will look at how a Hacker can setup a wireless Honeypot and do a SSL Man in the Middle Attack.

| View | Upload your own

Please download this file, before you view the presentation

Enable Javascript or Download Flash Playe if you see this!

Links:

1. Man in the Middle Attack

2. SSL Man in the Middle Attack

3. Dnsspoof Basics

4. Delegate Proxy

Vivek Ramachandran is a security evangelist and has been working in computer security related fields for the past 7 years. In 2007, Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe Latte Attack). The discovery of the Caffe Latte Attack was covered by CBS5 news, BBC online, Network World etc news agencies.In 2006, Vivek was announced as one of winners of the Microsoft Security Shootout contest held in India among 65,000 participants. He has also been a recipient of a Team Achievement at Cisco Systems for his work on 802.1x and Port Security modules on the Catalyst 6500 switches. Currently he spends all of his time maintaining Security- Freak.Net , SecurityTube.Net and is the founder of an online startup (currently in stealth mode). Vivek, is a Bachelor in Electronics and Communications Engineering from the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net