https://pinboard.in/u:jm/public/ recent bookmarks from jm 2024-03-28T10:06:10+00:00 https://twitter.com/haxrob/status/1772766039199363375 jm android security mitm exploits hacking facebook onavo snapchat surveillance youtube amazon vpns ssl tls https://pinboard.in/ https://pinboard.in/u:jm/b:ffe21525906c/ 2021-12-10T11:00:21+00:00 https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1624320 jmThis bug just compromised every ubuntu machine on my network. It falsely says that DNSSEC is not supported by the nameserver and resorts to non-DNSSEC resolution. So every machine on my network just accepted bogus DNS replies from a MITM. Thanks. Is there anything systemd can't break :(]]> systemd fail dns dnssec mitm security resolvers ubuntu bugs linux https://pinboard.in/ https://pinboard.in/u:jm/b:56f29ab67900/ 2020-11-13T18:09:17+00:00 https://www.scrapingbee.com/blog/charles-proxy/ jm scraping mitm charles web http proxies web-scraping automation https://pinboard.in/ https://pinboard.in/u:jm/b:7a89e2e70395/ 2020-08-24T21:23:05+00:00 https://seancoates.com/blogs/how-i-helped-fix-canadas-covid-alert-app jm mitmproxy mitm https ios apps reversing https://pinboard.in/ https://pinboard.in/u:jm/b:79da8f2472d6/ 2015-09-01T10:51:47+00:00 https://www.schneier.com/blog/archives/2015/08/using_samsungs_.html jmWhilst the fridge implements SSL, it FAILS to validate SSL certificates, thereby enabling man-in-the-middle attacks against most connections. This includes those made to Google's servers to download Gmail calendar information for the on-screen display. So, MITM the victim's fridge from next door, or on the road outside and you can potentially steal their Google credentials. The Internet of Insecure Things strikes again.]]> iot security fridges samsung fail mitm ssl tls google papers defcon https://pinboard.in/ https://pinboard.in/u:jm/b:d6fa2d55d6f6/ 2015-08-28T11:19:51+00:00 https://github.com/h2non/toxy#latency jmtoxy is a fully programmatic and hackable HTTP proxy to simulate server failure scenarios and unexpected network conditions. It was mainly designed for fuzzing/evil testing purposes, when toxy becomes particularly useful to cover fault tolerance and resiliency capabilities of a system, especially in service-oriented architectures, where toxy may act as intermediate proxy among services. toxy allows you to plug in poisons, optionally filtered by rules, which essentially can intercept and alter the HTTP flow as you need, performing multiple evil actions in the middle of that process, such as limiting the bandwidth, delaying TCP packets, injecting network jitter latency or replying with a custom error or status code. ]]> toxy proxies proxy http mitm node.js soa network failures latency slowdown jitter bandwidth tcp https://pinboard.in/ https://pinboard.in/u:jm/b:4cc87b3a400a/ 2015-02-19T23:41:17+00:00 http://marcrogers.org/2015/02/19/will-the-madness-never-end-komodia-ssl-certificates-are-everywhere/ jmI think that at this point it is safe to assume that any SSL interception product sold by Komodia or based on the Komodia SDK is going to be using the same method. What does this mean? Well, this means that those dodgy certificates aren’t limited to Lenovo laptops sold over a specific date range. It means that anyone who has come into contact with a Komodia product, or who has had some sort of Parental Control software installed on their computer should probably check to see if they are affected. ]]> komodia via:jgc ssl lenovo parental-control censorware mitm https://pinboard.in/ https://pinboard.in/u:jm/b:cea5b044b113/ 2015-02-19T21:41:15+00:00 http://www.theverge.com/2015/2/19/8069127/superfish-password-certificate-cracked-lenovo jmThe cracked certificate exposes Lenovo users to man-in-the-middle attacks, similar to those opened up by Heartbleed. Armed with this password and the right software, a coffee shop owner could potentially spy on any Lenovo user on her network, collecting any passwords that were entered during the session. The evil barista could also insert malware into the data stream at will, disguised as a software update or a trusted site. Amazingly stupid.]]> superfish inept ca ssl tls lenovo mitm security https://pinboard.in/ https://pinboard.in/u:jm/b:26af7d2dade0/ 2014-07-29T09:14:15+00:00 http://blog.ontoillogical.com/blog/2014/07/28/how-to-take-over-any-java-developer/ jmTo prove how easy [MITM attacking Mavencentral JARs] is to do, I wrote dilettante, a man-in-the-middle proxy that intercepts JARs from maven central and injects malicious code into them. Proxying HTTP traffic through dilettante will backdoor any JARs downloaded from maven central. The backdoored version will retain their functionality, but display a nice message to the user when they use the library. ]]> jars dependencies java build clojure security mitm http proxies backdoors scala maven gradle https://pinboard.in/ https://pinboard.in/u:jm/b:f51524567408/ 2013-11-20T22:54:23+00:00 http://www.renesys.com/2013/11/mitm-internet-hijacking/ jm bgp mitm internet security routing attacks hijacking https://pinboard.in/ https://pinboard.in/u:jm/b:b914434fa18f/ 2013-08-07T20:33:04+00:00 http://blog.ivanristic.com/2013/08/defending-against-the-breach-attack.html jmThe award for least-intrusive and entirely painless mitigation proposal goes to Paul Querna who, on the httpd-dev mailing list, proposed to use the HTTP chunked encoding to randomize response length. Chunked encoding is a HTTP feature that is typically used when the size of the response body is not known in advance; only the size of the next chunk is known. Because chunks carry some additional information, they affect the size of the response, but not the content. By forcing more chunks than necessary, for example, you can increase the length of the response. To the attacker, who can see only the size of the response body, but not anything else, the chunks are invisible. (Assuming they're not sent in individual TCP packets or TLS records, of course.) This mitigation technique is very easy to implement at the web server level, which makes it the least expensive option. There is only a question about its effectiveness. No one has done the maths yet, but most seem to agree that response length randomization slows down the attacker, but does not prevent the attack entirely. But, if the attack can be slowed down significantly, perhaps it will be as good as prevented. ]]> mitm attacks hacking security compression http https protocols tls ssl tcp chunked-encoding apache https://pinboard.in/ https://pinboard.in/u:jm/b:13c0a7ba2031/ 2013-04-24T15:17:25+00:00 http://www.dnsleaktest.com/what-is-transparent-dns-proxy.php jm Some ISP's are now using a technology called 'Transparent DNS proxy'. Using this technology, they will intercept all DNS lookup requests (TCP/UDP port 53) and transparently proxy the results. This effectively forces you to use their DNS service for all DNS lookups. If you have changed your DNS settings to an open DNS service such as Google, Comodo or OpenDNS expecting that your DNS traffic is no longer being sent to your ISP's DNS server, you may be surprised to find out that they are using transparent DNS proxying. (via Nelson)]]> via:nelson dns isps proxying mitm phorm attacks https://pinboard.in/ https://pinboard.in/u:jm/b:544f8cf96ebf/ 2012-12-05T21:06:57+00:00 http://danteslab-eng.blogspot.ie/2012/04/mig-in-middle.html jm security mig war mitm https://pinboard.in/ https://pinboard.in/u:jm/b:64814b04f2f0/ 2011-05-04T21:45:19+00:00 http://www.imperialviolet.org/2011/05/04/pinning.html jm https ssl http web security mitm sniffing chrome https://pinboard.in/ https://pinboard.in/u:jm/b:b5dfb3142372/