MITM 101: Easy Traffic Interception Techniques Using Scapy
Bob Simpson delivers a practical introduction to Man-in-the-Middle (MITM) attacks, crafting custom ARP spoofing and DNS redirection scripts in Python with Scapy.
Summary
Fundamentals of Man-in-the-Middle Attacks
Man-in-the-Middle (MITM) attacks allow an attacker situated on a local broadcast domain to transparently inspect, modify, and drop network communications.
Crafting ARP Spoofing Packets with Scapy
Bob Simpson introduces Scapy, a powerful Python packet manipulation library, demonstrating how to forge gratuitous ARP replies to poison gateway cache tables.
Intercepting and Modifying Live Traffic Streams
Simpson demonstrates capturing cleartext HTTP credentials, injecting rogue HTML payloads, and forging DNS responses on the fly.
Mitigating Layer 2 Network Attacks
The author reviews enterprise switch security features—including Dynamic ARP Inspection (DAI), DHCP Snooping, and 802.1X port authentication.
Related talks
IEEE Symposium on Security and Privacy·20 min
Analysts investigate attack surfaces and defenses concerning MitM Attack by Name Collision: Cause Analysis and Vulnerability Assessment in the New gTLD Era.
nullcon·30 min
Presenters detail vulnerability discovery and exploitation in Goa 2023 | MITM On PSTN: Novel Methods For Intercepting Phone Calls by Kirils Solovjovs.
nullcon·29 min
Industry experts analyze emerging threats surrounding Goa 2013: A Real Stealth & semi stealth MITM Attack.