Try Harder and Fail Harder!
- Adversary in the Middle AITM or MITM (man in the middle) attacks work by eavesdropping between two parties, Let’s say for example we have two persons A and B, they are connected over a network and sharing information and messages. The attacker C can perform network interception operations and listen to what the people have been discussing. It is a great method to hear the conversations without needing to compromise those both devices, which would be such a hassle. 2. ARP Cache poisoning ARP cache poisoning is a part of MITM attacks, It is used as a supportive attacks to get the target’s session. It works by faking a victim’s MAC address as other victim’s IP address. Then it is used to fake the appearance of the victim’s device and try to eavesdrop on the target using that IP address. 3. DHCP spoofing Dynamic Host Configuration Protocol(DHCP) spoofing is another type of MITM network attacks, where the attacker creates a fake DHCP honeypot for victims to connect and after a victim connects to it, the attacker then proceed to get information on the victim’s device. 4. MFA Request Generation As we know, multi factor authentication requests gets generated as we try to use our accounts which has it enabled, we think that having MFA is the utmost security we can add, actually it is only considered secure when the company that is using it has enough security standards. Without proper authenticated request generations, attackers can try to abuse the field and may disrupt services. 5. MFA Interception Just as we discussed above, It is very much possible for an attacker to intercept the MFA request tokens and remotely access the account without any proper authorization. For some reason, I couldn’t think of anything today. I guess it is one of those days where I am very less creative and less motivated. Hopefully It shall change tomorrow, I’ll see you tomorrow then!