Ettercap and SSLstrip: Preventing Network MITM Attacks

Ettercap and SSLstrip are closely associated with historical demonstrations of man-in-the-middle attacks. They highlight two different trust problems: a local network can be deceived about which system should receive traffic, and a browser can be steered away from a protected connection when the security upgrade is not enforced. For network owners, the practical task is… Read More »

Mastering Man-in-the-Middle Attacks: Using Ettercap and SSLstrip Effectively

A man-in-the-middle (MITM) attack occurs when another system can observe or influence traffic between communicating parties without their intended trust relationship being maintained. Network interception, redirection, and protocol downgrade are related but different problems. An assessor must identify which of those conditions exists before proposing a fix. Tools commonly associated with laboratory demonstrations, including Ettercap… Read More »